Usability and Project Management Sarah Cortes, PMP, CISA www.inmantechnologyIT.com Sarah’s blog: SecurityWatch Sarah’s ITtechEx column twitter: SecuritySpy LinkedIn: Sarah Cortes

Usability and Project Management Agenda Who are we? Project Management Overview Purpose? PMI Framework

Who are we?

Project Management Overview

Purpose?

PMI Framework

Sarah Cortes, PMP, CISA Clients: Harvard University Biogen Fidelity Professional Associations: Sarah is a member of the AIM Advisory Board on Data Privacy Laws to the Massachusetts Legislature Practice expertise Complex Application Development/Implementation IT Security/Privacy/Risk Management/Audit Management Data Center Operations Management Disaster Recovery/High Availability Program/Project Management Background SVP in charge of Security, DR, IT Audit, and some Data Center Operations at Putnam Investments As head of DR, ran Putnam's failover during 9/11 when parent Marsh McLennan failed over to our facility from the World Trade Center 99th floor data center Coordinated over 65 audits per year Previously ran major applications development for Trading/Analytics Systems

Clients:

Harvard University

Biogen

Fidelity

Professional Associations:

Sarah is a member of the AIM Advisory Board on Data Privacy Laws to the Massachusetts Legislature

Practice expertise

Complex Application Development/Implementation

IT Security/Privacy/Risk Management/Audit Management

Data Center Operations Management

Disaster Recovery/High Availability

Program/Project Management

Background

SVP in charge of Security, DR, IT Audit, and some Data Center Operations at Putnam Investments

As head of DR, ran Putnam's failover during 9/11 when parent Marsh McLennan failed over to our facility from the World Trade Center 99th floor data center

Coordinated over 65 audits per year

Previously ran major applications development for Trading/Analytics Systems

Usability and Project Management Overview Integration Management Scope Management Time Management Cost Management Quality Management Human Resources Management Communications Management Risk Management Procurement Management

Integration Management

Scope Management

Time Management

Cost Management

Quality Management

Human Resources Management

Communications Management

Risk Management

Procurement Management

Usability and Project Management History Henry Gantt (1861 - 1919)

Henry Gantt (1861 - 1919)

Usability and Project Management Overview Integration Management Scope Management Time Management Cost Management Quality Management Human Resources Management Communications Management Risk Management Procurement Management

Integration Management

Scope Management

Time Management

Cost Management

Quality Management

Human Resources Management

Communications Management

Risk Management

Procurement Management

Usability and Project Management Stages Project initiation Project planning or design Project execution or production Project monitoring and controlling Project completion

Project initiation

Project planning or design

Project execution or production

Project monitoring and controlling

Project completion

Usability and Project Management Scope Management Scope Planning Scope Definition Work Breakdown Structure Development Scope Verification Scope Change Control

Scope Planning

Scope Definition

Work Breakdown Structure Development

Scope Verification

Scope Change Control

Usability and Project Management Standards Overview ISO/IEC 27000 - International Organization for Standardization/International Electrotechnical Commission ITIL – Information Technology Infrastructure Library NIST - National Institute of Standards and Technology PMBOK – Project Management Body of Knowledge TOGAF - The Open Group Architecture Framework CMMI for Development - Capability Maturity Model Integration SEI’s CMM (Capability Maturity Model) for SW (US DoD) Software Engineering Institute COBIT - Control Objectives for Information & related Technology Information Systems Audit and Control Association

ISO/IEC 27000 - International Organization for Standardization/International Electrotechnical Commission

ITIL – Information Technology Infrastructure Library

NIST - National Institute of Standards and Technology

PMBOK – Project Management Body of Knowledge

TOGAF - The Open Group Architecture Framework

CMMI for Development - Capability Maturity Model Integration

SEI’s CMM (Capability Maturity Model) for SW

(US DoD) Software Engineering Institute

COBIT - Control Objectives for Information & related Technology

Information Systems Audit and Control Association

Usability and Project Management Is the P urpose to…? Drive you crazy? Waste your precious resources in a pointless task that will soon be out of date? Serve as evidence to be used against you later?

Drive you crazy?

Waste your precious resources in a pointless task that will soon be out of date?

Serve as evidence to be used against you later?

Usability and Project Management Could policies help….? Save you after you have already gotten into trouble? Attempt, however lamely, to keep you out of trouble Prove that, however obvious the trouble is, it is not your fault

Save you after you have already gotten into trouble?

Attempt, however lamely, to keep you out of trouble

Prove that, however obvious the trouble is, it is not your fault

Usability and Project Management Calling in the Experts

Usability and Project Management Did you know….? Seven out of ten attacks are from…

Seven out of ten attacks are from…

Usability and Project Management You may be wondering… Why develop and document IT policies, standards and technical directives? Is it really worth it? What’s in it for me? Who will pay for the resources thusly diverted?

Why develop and document IT policies, standards and technical directives?

Is it really worth it? What’s in it for me?

Who will pay for the resources thusly diverted?

Usability and Project Management Integration Management Project Charter Development Project Scope Statement Development Project Plan Development Project Plan Execution Monitoring and Controlling of Project Work Overall Change Control Project Closure

Project Charter Development

Project Scope Statement Development

Project Plan Development

Project Plan Execution

Monitoring and Controlling of Project Work

Overall Change Control

Project Closure

Usability and Project Management Scope Management Scope Planning Scope Definition Work Breakdown Structure Development Scope Verification Scope Change Control

Scope Planning

Scope Definition

Work Breakdown Structure Development

Scope Verification

Scope Change Control

Usability and Project Management Time Management Activity Definition Activity Sequencing Activity Resource Estimating Activity Duration Estimating Schedule Development Schedule Control

Activity Definition

Activity Sequencing

Activity Resource Estimating

Activity Duration Estimating

Schedule Development

Schedule Control

Usability and Project Management Cost Management Cost Estimating Cost Budgeting Cost Control

Cost Estimating

Cost Budgeting

Cost Control

Usability and Project Management Quality Management Quality Planning Quality Assurance Quality Control

Quality Planning

Quality Assurance

Quality Control

Usability and Project Management Human Resources Management Human Resource Planning Staff Acquisition Team Development Team Management

Human Resource Planning

Staff Acquisition

Team Development

Team Management

Usability and Project Management ISACA Communications Management Communications Planning Information Distribution Performance Reporting Stakeholder Management

Communications Planning

Information Distribution

Performance Reporting

Stakeholder Management

Usability and Project Management Procurement Management Planning for Purchases and Acquisitions Contract Planning Requesting seller Responses (RFPs) Source Selection Contract Administration Contract Close-out

Planning for Purchases and Acquisitions

Contract Planning

Requesting seller Responses (RFPs)

Source Selection

Contract Administration

Contract Close-out

Usability and Project Management Risk Management Risk Management Planning Risk Identification Risk Assessment Risk Analysis-Quantitative and Qualitative Risk Response Planning Risk Monitoring and Control

Risk Management Planning

Risk Identification

Risk Assessment

Risk Analysis-Quantitative and Qualitative

Risk Response Planning

Risk Monitoring and Control