System and method for security project management
View Patent ↗A database-modeled security policy includes policy statements stored in a database. Each policy statement has associated standards, guidelines, and procedures. Policy statements are grouped together into tag groups, which are in turn grouped together to form metapolicies. A security administrator uses a security policy management application to create metapolicies for specific audiences. A lightweight directory access protocol module manages access to the security policy. The security policy management application also provides scoring, reporting, and project management functionalities.
1. A system for security project management comprising:
a security policy stored in a database;
a security policy management application configured to interact with the security policy; and
project management tools configured to operate in conjunction with the security policy management application.
2. The system of claim 1 , wherein the project management tools include project definitions that are directly related to the security policy.
3. The system of claim 2 , wherein the project definitions are directly related to areas of security that are below a threshold level of compliance as determined by the security policy management application.
4. The system of claim 1 , wherein the project management tools include team management, such that team members are matched to a security project according to skills that correspond to an area of security of the security project.
5. The system of claim 4 , wherein the area of security of the security project is defined by policy statements in the security policy.
6. The system of claim 1 , wherein the project management tools include project plans and timelines.
7. The system of claim 1 , wherein the project management tools include status reports.
8. The system of claim 7 , wherein the status reports are prepared by team members and are submitted online for viewing by a project manager.
9. The system of claim 8 , wherein the team members may indicate a section of one of the status reports as critical, which triggers an immediate notification to the project manager.
10. The system of claim 1 , wherein the project management tools include project prioritization wherein priority of a project is directly related to weights of corresponding policy statements in the security policy.
11. The system of claim 1 , wherein the project management tools include collateral information.
12. The system of claim 1 , wherein the project management tools integrate with an electronic mail application to automatically send reminders.
13. The system of claim 1 , wherein the project management tools integrate with an electronic messaging service to automatically send reminders.
14. A method for security project management comprising the steps of:
storing a security policy in a database;
configuring a security policy management application to interact with the security policy; and
configuring project management tools to operate in conjunction with the security policy management application.
15. The method of claim 14 , wherein the project management tools include project definitions that are directly related to the security policy.
16. The method of claim 15 , wherein the project definitions are directly related to areas of security that are below a threshold level of compliance as determined by the security policy management application.
17. The method of claim 14 , wherein the project management tools include team management, such that team members are matched to a security project according to skills that correspond to an area of security of the security project.
18. The method of claim 17 , wherein the area of security of the security project is defined by policy statements in the security policy.
19. The method of claim 14 , wherein the project management tools include project prioritization wherein priority of a project is directly related to weights of corresponding policy statements in the security policy.