The Acceptable Process Standards

Published Date: 02 Nov 2017

The Quality Management Plan for secure world Ltd.: Security infrastructure improvement project will define activities, processes, and procedures for ensuring upon the conclusion of the project that a quality product is delivered. This plan will:

Ensure that quality is planned

Define how quality will be managed

Physical Security

IT security & Network security

Define quality assurance activities

Quality Management PLAN/ APPROACH

This describes the approach used by the organization the organization for managing quality throughout the project lifecycle. A quality management plan helps to prevent repeated work, cost and time wastage.

The quality management approach for security infrastructure improvement project will ensure quality is planned for processes. In order to ensure success of this project, it will utilize an integrated quality approach to define quality standards and measure quality according to ISO 27002, and continuously improvement model to ensure that all people in the organization are aware of security infrastructure in place and how to use it in the proper way.

The security infrastructure improvement process quality will focus on the processes by which the project deliverables will be implemented. Establishing process quality standards will ensure all activities conform to organizational standard and reputable structures for best practices like ISO which results in the successful delivery of the project processes.

The project team will work with a quality group to define and document all organizational and project specific quality standards for all processes. This documentation will become part of the secure world ltd.: security infrastructure improvement Project Plan and will be transitioned to operations upon the successful completion of the project.

To measure quality throughout the project life cycle, metrics will be developed by the project manager and project team. These process measurements will be used as a criterion in determining whether the project is successful and will be reviewed by the project sponsor. Those metrics will include:

Schedule

Resources

Security and infrastructure tools performance

Quality Requirements / Standards

This will be used to identify and document the quality requirements and standards. It will also show how the project will demonstrate compliance ISO 9001, ISO 27002 quality standards.

ISO 9001 is a standard that defines quality management standards and ISO 27002 defines recommended information security practices.

Process Quality:

The process quality standards and requirements will be determined by the project team and quality group. Many of these standards will be based on existing company process standards.

Quality Assurance

This section explains how you will define and document the process for auditing quality requirements and results from quality control measurements in order to ensure that quality standards and operational definitions are used. This section should also document the actual quality assurance metrics used for this project.

The quality assurance of the security infrastructure improvement Project focuses on the processes used in the improvement of security and infrastructure of the organization. In order to ensure quality, an iterative quality process will be used throughout the project life cycle, which includes measuring process metrics, analyzing process data, and continuously improving the processes.

The Project Manager together with his team will perform assessments at planned intervals throughout the project to ensure all processes are being correctly implemented and executed. Key performance metrics for the security infrastructure improvement project include Physical security and IT improvement

Process Action

Acceptable Process Standards

Assessment Interval

Physical Infrastructure improvement

Physical security perimeters should be put into place to protect areas by adding cctv cameras to monitor the area.

Physical entry controls like security guards to protect secure areas.

Secure access to your organization offices, rooms, and facilities.

Should protect your facilities from natural and human threats.

Isolate and control public access points.

Daily or per run

I.T INFRASTRUCTURE IMPROVEMENT

Protect communications using a VPN implemented for remote site access by employees.

Establish a user access control procedure to data by implementing active directory.

Establish network security controls through use of Cisco ASA 5525-X Firewall Edition

Establish network routing controls through implementation of CISCO891W-AGN-A-K9 IEEE 802.11b/g/n, IEEE 802.3 Gigabit Ethernet Wireless Security Router

Expect users to protect their by ensuring their antivirus software is equipment up to date

 Daily or per run

A quality manager will provide quality management, conduct process audits, monitor process performance metrics and ensure all processes comply with project and organizational standards and best practices like ISO. If discrepancies are found, the quality manager will meet with the Project Manager and review the identified discrepancies.

The Project Manager will schedule regularly occurring project, management, and document reviews. In these reviews, an agenda item will include a review of project processes, any discrepancies and/or audit findings from the quality manager, and a discussion on process improvement initiatives.

Continuous improvements will be made as a part of our quality assurance process through reviews, findings, and assessments to ensure process improvement. All process improvement efforts will be documented, implemented, and communicated to all stakeholders as changes are made.

Sponsor Acceptance

Approved by PETER PARKER:

Date:

PETER PARKER

Project Sponsor