CYB410-Module3

Why are project management skills especially important in cybersecurity?

Poor organization/planning in cybersecurity can mean a compromise of secure systems. PM skills are highly valued (ranked 4th top skill employers want per a 2019 Burning Glass Technologies survey) and give broad appeal beyond security roles.

Name a few cybersecurity jobs that require strong PM skills.

Examples include Security Consultant, Penetration Tester, Cybersecurity/IT Manager, and Security Architect.

Where does the PMP certification rank among top-paying IT/security certifications?

PMP (Project Management Professional) ranks in the top ten highest-paying IT certifications, alongside security certs.

What are the four major functions of management (PLOC)?

Planning, Leading, Organizing, and Controlling.

What is "Planning" as a management function?

Deciding on specific objectives and courses of action; includes strategic, tactical, and operational planning.

What is "Leading" as a management function?

Using influence to inspire and motivate others to take action, understanding employees' skills/passions to assign tasks effectively.

What is "Organizing" as a management function?

Structuring and allocating employees/resources to meet objectives; includes organizational design, job design, and job enrichment/teamwork.

What is "Controlling" as a management function?

Ensuring standards are upheld: establishing performance standards, comparing actual performance to standards, and taking corrective action.

How does PMI define Project Management?

The application of knowledge, skills, tools, and techniques to project activities to meet project requirements. Projects are temporary endeavors to create a unique product, service, or result.

What are the key characteristics shared by all projects?

Temporary with a planned end date; have a team, budget, schedule, and set goals/expectations; unique (not routine); use specific tools/techniques not typical of normal operations.

How do projects differ from operations?

Projects are temporary and unique; operations are ongoing and repetitive.

What defines a "successful" project?

One that meets or exceeds the expectations of the stakeholders.

What are the six competing project constraints?

Cost, scope, quality, risk, resources, and time.

What is the "triple constraint" in project management?

Competing constraints represented as sides of a triangle; changing any one side forces a change in the others. A balanced project keeps the triangle in equilibrium.

What caused the Petrobras P-36 disaster, in PM terms?

A complete failure in quality assurance. Pressure for increased production led to cut safety procedures, resulting in explosions, the platform sinking, 11 deaths, and about $515 million in damage.

What lesson does the Petrobras disaster teach about project constraints?

Prioritizing one constraint (production/schedule) at the expense of another (quality/safety) can lead to catastrophic failure; constraints must stay balanced.

What four areas of expertise must a project manager bring to the team?

Knowledge of the application area (industry standards/regulations), understanding of the environment (culture, political, physical, global), general management knowledge/skills (PLOC), and interpersonal skills.

What does "interpersonal skills" include for a project manager?

Leadership, negotiation, motivation, communication, and influence.

What are the four phases of the project life cycle?

Initiation, Planning, Implementation/Execution, and Closure.

What happens during the Initiation phase of a project?

The project objective/need is identified, a business case with solution options is documented, and a feasibility study addresses "can we do it?" and "should we do it?"

What happens during the Planning phase of a project?

The solution is developed in detail; tasks, resources, dependencies, timeframes, and budget are identified. Also called "scope management."

What happens during the Implementation/Execution phase of a project?

The plan is carried out; progress is monitored, adjustments/variances are recorded. The PM spends most of their time here.

What happens during the Closure phase of a project?

Final deliverables are released to the customer, documentation is handed over, contracts are terminated, resources released, and stakeholders notified the project is closed.

What is project scope?

The combined objectives and requirements needed to complete a project; the boundaries of what is and isn't included. Directly impacts schedule, budget, and risk.

What is a deliverable?

Any objective or milestone within a project, such as a product, service, process, or required document.

What's the difference between product scope and project scope?

Product scope defines the characteristics/functions of the final product or service. Project scope covers all the work needed to deliver it (goals, deliverables, tasks, members, deadlines, milestones).

What is "scope creep" and why is it a problem?

Small, uncontrolled changes that expand a project beyond its original budget/time limits; these can cascade into further changes and requirements.

What are two popular visualization tools for project schedules?

Gantt charts and PERT (Program Evaluation Review Technique) charts.

What should a project scope statement include?

An introduction/purpose, required deliverables, project milestones, and any constraints or exclusions.

What's one of the first questions to ask when starting a project (risk management)?

"What can go wrong in the project?" Thinking preventatively about risk early on.

What is Murphy's Law?

"Anything that can go wrong, will go wrong." A reminder to plan for potential failures in advance.

How does the risk management article suggest managing project risk?

Write a detailed project charter (vision, objectives, scope, deliverables) so risks can be identified at every stage, and engage the team early to identify risks.

How does the vendor article suggest dealing with identified risks?

Log every risk (using a risk tracking template), create a risk management plan capturing negative/positive impacts and planned actions, and hold regular meetings to monitor risk throughout the project.

What is a Work Breakdown Structure (WBS)?

A hierarchical breakdown of all the work in a project, organized in terms of deliverables, showing what work must be performed to produce them.

What are the limitations of a WBS?

It doesn't address schedule, dependencies, or resources well. It's a starting point that must be developed further into a Gantt or PERT chart.

What is a Gantt chart?

A horizontal bar chart that visualizes a project schedule. Each bar shows a task's start date, end date, and duration, often linked to show dependencies between tasks.

What is FMEA (Failure Mode & Effects Analysis)?

A systematic method for identifying potential ways a process/system could fail, then rating each failure mode to prioritize risk mitigation.

What three factors make up an FMEA Risk Priority Number (RPN)?

Severity, Occurrence (likelihood), and Detection (likelihood of catching it). Multiplied together to calculate the RPN; higher RPN means higher priority risk.

Why is scope management sometimes tied to the "Planning" phase?

Because identifying all project tasks, resource requirements, and the strategy to produce them (i.e., defining scope) happens during planning.

Which of the four functions of management involves ensuring performance standards are met and taking corrective action when needed?

Controlling

According to PMI, which characteristic is NOT true of a project (projects vs. operations)?

Being ongoing and repetitive — projects are temporary with a planned end date, not ongoing

What defines a "successful" project? (quick check)

One that meets or exceeds stakeholder expectations

Which of these is NOT one of the six competing project constraints?

Morale — the six constraints are cost, scope, quality, risk, resources, and time

In the "triple constraint" triangle, what happens if you change one side (e.g., reduce time)? (quick check)

The other constraints must adjust to compensate

What was the primary root cause of the Petrobras P-36 disaster? (quick check)

A complete failure in quality assurance due to production pressure

Which area of project manager expertise involves understanding culture, politics, and global factors surrounding a project? (quick check)

Understanding of the environment

During which phase of the project life cycle does a feasibility study address "can we do this project?"

Initiation

A project manager typically spends the majority of their time during which phase?

Implementation/Execution

Releasing final deliverables, terminating supplier contracts, and communicating project completion to stakeholders all happen during which phase?

Closure

Which best describes "scope creep"? (quick check)

Small, uncontrolled changes that gradually expand a project beyond its original limits

What's the key difference between product scope and project scope? (quick check)

Product scope is the final product's features; project scope is all the work needed to deliver it

Which tool is a hierarchical breakdown of project work organized by deliverables, but doesn't address schedule or dependencies well on its own?

Work Breakdown Structure (WBS)

In FMEA, what does a high Risk Priority Number (RPN) indicate?

The failure mode needs urgent mitigation

According to the assigned readings, what's good practice for managing project risk?

Write a detailed project charter and identify risks early with the team