New Information Security Risk Management Framework as an Integral Part of Project Life Cycle

Abstract

One of the critical success factors in managing any information system project is the information security risk management. When taken seriously and implemented correctly according to best practice of project management process, information security risk management helps to deliver the project on the exact predefined time, on budget and with a high quality as requested by the project stakeholders. This paper explains a good practice of security risk management process and propose a new information security risk management framework to be applied into project life cycle.