Process Optimization In The Information Security Consulting Service Project

Compare to the traditional IT industry and information security consulting service,Consulting service have some special characteristics, which include uncertainty of projectdeliverables, dynamic of information security requirement, subjectivity of consulting processand sensitivity of the consulting result. And as an emerging industry, its project processmanagement theory is still in the primary stage, which is in the attempt and innovation inpractice that follows the industry characteristic.Guiding from project process optimization theory and objected to information securityconsulting service project, this file use system optimization, process integration and caseanalysis combined methods to systematic discuss process optimization theory of the projectwhich based on the previous in project management optimization theory and informationsecurity consulting services on the basis of field survey. At the end of this paper, the projectprocess optimization study conclusions and recommendations, by not only the theory abovebut also from analysis works form project process management and construction ofinformation security consulting services project process optimization and simulation ofinformation security consulting services project process to optimize the process. In the end,the following conclusions are given based on the practices from a case which was sievedinformation security service for an government department case.（1） Communication is the key for implement an successfully information security riskassessment project. It exists across many important actives, such as the deciding the projectscope, understanding and managing the requirements and expectations of the stakeholders,and project team building. The communication need to be paid the most of attention to.（2） A clear scope of assessment is essential. Project time, cost and quality could onlybe planed when the range is defined. For the scope management, the scope communicate anddiscuss with client should be started as early as possible and the project range should becontrolled during implementation.（3） strictly time management guarantee of project completion. The value of projectcreates from skill of project term members and time cost for the client and organization.Critical chain, PERT value analysis and optimization methods used to be an effective way tosolve the project delay. （4） project team is base stone of a project.Although the quality of project relies on thecapability, attitude and skill of the team members, the loss of the key members would largelyincrease the risk of the project. Therefore, human resource management is an important workin the project management.（5）Project risk management in details is a supplementary tool for projects. There aretwo main aspects of risks to be considered: risks from project management and risks of thetargets of evaluation from implementation.