The Quality Management Plan Approach

Published Date: 02 Nov 2017

The Quality Management Plan for secure world Ltd.: Security infrastructure improvement project will define activities, processes, and procedures for ensuring upon the conclusion of the project that a quality product is delivered. This plan will:

Ensure that quality is planned

Define how quality will be managed

Physical Security

IT security & Network security

Define quality assurance activities

Quality Management PLAN/ APPROACH

This describes the approach used by the organization the organization for managing quality throughout the project lifecycle. A quality management plan helps to prevent repeated work, cost and time wastage.

The quality management approach for security infrastructure improvement project will ensure quality is planned for processes. In order to ensure success of this project, it will utilize an integrated quality approach to define quality standards and measure quality according to ISO 27002, and continuously improvement model to ensure that all people in the organization are aware of security infrastructure in place and how to use it in the proper way.

The security infrastructure improvement process quality will focus on the processes by which the project deliverables will be implemented. Establishing process quality standards will ensure all activities conform to organizational standard and reputable structures for best practices like ISO which results in the successful delivery of the project processes.

The project team will work with a quality group to define and document all organizational and project specific quality standards for all processes. This documentation will become part of the secure world ltd.: security infrastructure improvement Project Plan and will be transitioned to operations upon the successful completion of the project.

Metrics will be established and used to measure quality throughout the project life cycle for the processes. The Project manager will be responsible for working with the project team to define these metrics, conduct measurements, and analyze results. These product and process measurements will be used as one criterion in determining the success of the project and must be reviewed by the project sponsor. Metrics will include:

Schedule

Resources

Security and infrastructure tools performance

Customer Satisfaction (as a result of field trials)

Quality Requirements / Standards

This will be used to identify and document the quality requirements and standards. It will also show how the project will demonstrate compliance ISO 9001, ISO 27002 quality standards.

ISO 9001 is a standard that defines quality management standards and ISO 27002 defines recommended information security practices.

Process Quality:

The process quality standards and requirements will be determined by the project team and quality group. Many of these standards will be based on existing company process standards.

Quality Assurance

This section explains how you will define and document the process for auditing quality requirements and results from quality control measurements in order to ensure that quality standards and operational definitions are used. This section should also document the actual quality assurance metrics used for this project.

The quality assurance of the security infrastructure improvement Project focuses on the processes used in the improvement of security and infrastructure of the organization. In order to ensure quality, an iterative quality process will be used throughout the project life cycle, which includes measuring process metrics, analyzing process data, and continuously improving the processes.

The Project Manager together with his team will perform assessments at planned intervals throughout the project to ensure all processes are being correctly implemented and executed. Key performance metrics for the security infrastructure improvement project include Physical security and IT improvement

Process Action

Acceptable Process Standards

Assessment Interval

Physical Infrastructure improvement

Use physical security perimeters to protect areas by adding cctv cameras.

Use physical entry controls to protect secure areas security guards.

Secure your organization’s offices, rooms, and facilities.

Protect your facilities from natural and human threats.

Use work guidelines to protect secure areas.

Isolate and control public access points.

Daily or per run

I.T INFRASTRUCTURE IMPROVEMENT

Protect mobile computing and communications using a VPN implemented for remote site access by employees.

Establish a user access control procedure to data by implementing active directory.

Establish network security controls through use of Cisco ASA 5525-X Firewall Edition

Establish network routing controls through implementation of CISCO891W-AGN-A-K9 IEEE 802.11b/g/n, IEEE 802.3 Gigabit Ethernet Wireless Security Router

Expect users to protect their by ensuring their antivirus software is equipment up to date

 Daily or per run

The quality manager will provide day to day quality management and conduct process audits on a weekly basis, monitor process performance metrics, and assure all processes comply with project and organizational standards. If discrepancies are found, the quality manager will meet with the Project Manager and review the identified discrepancies.

The Project Manager will schedule regularly occurring project, management, and document reviews. In these reviews, an agenda item will include a review of project processes, any discrepancies and/or audit findings from the quality manager, and a discussion on process improvement initiatives.

Process improvement is another aspect of quality assurance. Quality assurance reviews, findings, and assessments should always result in some form of process improvement and, as a result, product improvement. All process improvement efforts must be documented, implemented, and communicated to all stakeholders as changes are made.

Sponsor Acceptance

Approved by the Project Sponsor:

Date:

<Project Sponsor>

<Project Sponsor Title>

This free Project Quality Management Plan Template is brought to you by www.ProjectManagementDocs.com

http://www.praxiom.com/iso-17799-2005.htm