1. PRJ505 Communications Management

2. Communication Management Processes: –Planning –Information Distribution –Performance Reporting –Stakeholder Management Expectations, responses

3. Good communication Right information sent to right people at right time Each “right” is critical and needs thorough consideration

4. Communication Plan Communication Plan must address –Audience –Content –Medium for delivery –Timing –Communication Deliverables –Responsible person (a doer)

5. Communication Plan Sample

6. How to define … Audience – that is your project stakeholders. Comprehensive and granular list of stakeholders is critical for communication plan, and for the project success Content – anything you feel be important for the stakeholders to know. Be selective, send only relevant information

7. How to define (cont) Medium for delivery – need your gut feeling what may work and what not, but also see recommendations below Frequency – may be one time shot, or periodical update. Be reasonable but make sure that stakeholders know what they need all the time

8. How to define (cont) Deliverables – define how information will be organized (formal document, notes, etc.) Responsible person – one who will take responsibility for delivery, names or roles

9. Define medium: Face To Face 58% body language 35% tone 7% words

10. Table 10-2: Media Choice Table Information Technology Project Management, Fifth Edition, Copyright 2007

11. Challenges in (Global) IT Cultural differences (different norms) Language differences Different working hours & time zones Different knowledge levels

12. Communication Tips Have approval of your broadcasting messages Reflect communication actions in your project plan Have a one responsible for each communication item

13. Communication Tools Use communication tools –Teleconferencing –Sharepoint –Email Be aware about security issues –Protect messages with encryption –Use digital signature

14. Communication in security projects List of stakeholders always contains (in addition to other groups): –Information security department/ CSO –Risk management Often include: –Business Continuity Plan group –Incident Management group

15. Communication in security projects CSO service is large and carry on a lot of responsibilities for different audience. Learn the CSO structure to define specific group relevant to your project Consult the department leader to determine right names

16. Communication in security projects Major groups: –Security architecture –Information security policy –Access control –Physical security –Operational security –Network security –Perimeter protection –Database security –Application security

17. Communication in security projects Apply the “need to know” principle when creating the content and deciding to whom it is to be sent. Do not supply unnecessary technical details Consider different channels to communicate sensitive information