Security and compliance should be considered throughout the project lifecycle rather than treated as activities performed at the end of delivery. Project managers can improve outcomes by incorporating security requirements, risk assessments, controls, audit evidence and compliance checkpoints into project planning and governance.
Managing Security and Compliance in IT Projects
How project managers can integrate security, risk and compliance requirements into enterprise technology delivery.