Integrating Information Security into Project Management

At UBC, we handle sensitive information daily, making robust security practices essential. By embedding information security into project management practices, we can collectively safeguard UBC's information and systems, ensuring a secure and trustworthy environment for our community.

Why Information Security Matters in Project Management

Information security encompasses the practices that protect information from unauthorized access, use, disclosure, disruption, modification, or destruction. Its primary goal is to safeguard the confidentiality, integrity, and availability of data.

Project management involves planning, organizing, and managing resources to achieve specific goals. This often includes managing information assets, especially with the rise of online activities and remote work. Integrating information security into project management ensures that security risks are identified, assessed, and addressed throughout the project lifecycle.

Practical Steps for Implementation

To effectively integrate information security into project management, consider the following steps:

1. Define information security requirements: Identify business needs, legal obligations, and potential security threats related to the project.
2. Assess risk impacts: Evaluate the potential consequences of information security threats on the project.
3. Implement appropriate controls: Establish processes and security measures to mitigate identified risks.
4. Monitor and report: Regularly track the effectiveness of implemented controls and adjust as needed.

Responsibilities and Collaboration

Project managers play a crucial role in ensuring information security is integrated into the project lifecycle. They need to be aware of UBC's Information Security Standards and related procedures. Consulting with a member of the UBC Cybersecurity team can help determine specific security requirements for different projects.

Benefits of Integration

Integrating information security into project management offers several benefits:

• Proactive risk management
• Compliance with regulations
• Enhanced project efficiency
• Protection of UBC's reputation

Go Further…

• The Compliance Support Program provides guidance and support for units in meeting their information security responsibilities
• Review UBC’s Information Security Standards
• Minimum Cybersecurity Controls
• Contact the UBC Cybersecurity team for a consultation