Security concepts for IT projects: CIA triad, least privilege, access reviews and building security requirements in from the start

Every IT project touches security, even when security is not its goal. A new application may store personal data, a network upgrade may open new paths into the company, and a vendor may need access to internal systems. Project+ does not expect deep technical security skills, but it does expect a project manager to recognize security needs, involve the security team early and plan the work and time that security requires.