This case study portrays the project management of Information Security Project in the leading Healthcare based company Merck. The Merck is a
healthcare based company that operates in the international countries such as
United States. The healthcare industries adopt certain security policies in
order to ensure the development of the product manufacturing. The manufacturing
products and services are provided with the development such that the
healthcare companies are ought to maintain their security policies with the
product research and their production.
The considered
organization includes the Merck that involves the production of the medical
devices, research and development of the healthcare products. The security is
needed to be maintained as per the international standards. The company is
producing the medical devices.
Operations
The operations
involve the software development for the medical data management, documents for
the medical standards and policies, measuring the medical manufacturing
products with their standards.
Products
and Services
The various
products and services involved in the Merck include the manufacturing of
healthcare devices, medical data, and different healthcare products with their standard
documentation (JARVIS,
L. 2006).
Clients
The clients include the various physician
clinics, laboratories, hospitals and the providers and so on. The clients
include the different healthcare technological companies.
Suppliers
The suppliers
include the different resource intake with the resources from recruiters. The
suppliers and the temporary staffs are provided from different recruiting
agencies.
Competitors
The competitors
for the company include the product manufacturing of the healthcare company.
The competitors are Johnson and Johnson, Baxter healthcare and so on. The
manufacturing of the healthcare company include the different medical products,
and the products are developed with the novel methods.
Processes
The processes
for the medical product development with the research. The healthcare process
is needed for the medical product development. The healthcare data is needed
and the different processes are provided. The healthcare products have the
documentation standard such as ISO 13485 (Hamimi Abdul Razak et.al,
2009). The documentation must be made provided with the
secured environment as per ISO 27001 (Freeman, E. 2007).
Issues
or Challenges
The issues and
challenges in the project include the
data mining, security of the data, and maintenance of the document with their
structure along with gap analysis.
Time Management Plan:
The plan of the
time schedules are provided and the estimation of the time are managed with the
plan. The time schedule is shown with the various tasks such as the tasks with
the security plans, system implementation with the standards and policies development.
The secured environment is provided with the firm maintaining the security
project. The security plans are having the security standards with the system
maintenance.
WBS
Research 1
Security
Plans
The plans of the security are provided with
the firm and the resources are showing the security. The security plans are
proposed such that the method of adopting the security with the resources.
New
security
The new security idea and policies are
implemented in the firm for enhanced ideas contributing towards the
development.
Research
2
Firm
Analysis
The analysis of
the firm is very mandatory since the firm analysis is used to provide the
information of the current situation of the process that the firm is
implementing in terms of the policies, and security, issues and ethics.
New
Login System
The new login
and biometric system were created for the employees to track the employees with
their secured environment.
Front-end
development
The front-end
development of the system is made with the use of the web technologies for the
user interface and for making interactive user experience.
Back-end
development
The back-end
development of the system led to track the data from the servers.
Standards
adoption
The standards adoption is made with the use
of the international standards such as ISO 27001.
Guidelines
The guidelines are adopted for the
standards and the companies are providing the various guidelines and protocols
for accepting those standards in the firm.
Research
3
Control
of risks
The risks are present in the system. These
risks are maintained and are mitigated with the appropriate regulation adoption
and implementation of the risks with the process.
Security
validation
The security validation is performed with
the officers and analyst for checking and validating the system with the
security levels. The examples include the testing of the login system.
Policies
and ethics
The policies and
ethics are provided with the firm using their appropriate strategies, technical
documentation.
New
Protection techniques
The protection
techniques are adopted as a novel strategy such as the encryption of the files,
authentication of the system, mobile compliance that to be implemented in the
firm.
Guidelines
The guidelines for the protection of the
data and the risk control or mitigation are performed.
Justification
for Gantt chart
The Gantt
chart is having various justifications such that they are used in the analysis
(Swan, A. 1942).
The
justification reasons are provided as follows.
- Schedules can understand with the tasks
- The analysis can be enhanced with “What if” scenarios
- Control of the project is developed
- The Gantt chart gives the chance for the negotiations
- The comparison of the projects for determination of the various schedules, estimation of the costs, and resources in distinct resources.
References
Freeman, E. (2007). Holistic
Information Security: ISO 27001 and Due Care. Information Systems Security,
16(5), pp.291-294.
Hamimi Abdul Razak, I.,
Kamaruddin, S., Abdul Azid, I. and Putra Almanar, I. (2009). ISO 13485:2003.
The TQM Journal, 21(1), pp.6-19.
Hudson, S. and Laken, M. (2015). Use of a PERT Chart
to Improve Efficiency of the Dissertation. Nursing Education Perspectives,
36(4), pp.257-258.
JARVIS, L. (2006). MERCK
BIOLOGICS. Chemical & Engineering News, 84(20), p.10.
Maylor, H. (2001). Beyond the Gantt chart:.
European Management Journal, 19(1), pp.92-100.
Swan, A. (1942). The Gantt chart as an aid to
progress control. Journal of the Institution of Production Engineers, 21(10),
p.402.