Master Project Plan

{An overview description of the project oriented toward top-level management. It should include:}

1.1. Project Description

EON INC is a security systems development company. We concentrate on agile software that can respond to threats in information system using AI technology and advanced loops that can learn and correct response in real time. Our programmers and system analyst have developed the future in Robotics and Intelligent systems that provide query engines and easy access to valuable information while providing state of the art protection. EON has Installing New Software Program to enhance a state of the art security system.

This project will provide a security system for an Undisclosed company Big Data division to facilitate and progress in today’s technological advancement were companies are foregoing security while concentrating on becoming technological and analytic capable.

EON has developed Information Security Committee made up of the following members.

CTO (Chief Technology Officer)

Senior VP Security Systems

Senior Systems Security Engineer

Senior IT training director

Security Systems Engineer

IT project manager

Implementation and maintenance Engineer

Human Resources Director

Public Relations Officer

IT Functional Managers

The idea is to create an environment that benefits the organizational reputation, retention, rate of return while focusing on significantly damaging intrusions. As a technological advanced organization and a provider of security systems solutions, we intent to promote the use of AI SECOP software and its success as intended. This will also allow employees to receive system warnings and recognize common attack techniques delivered online and inhouse to facilitate evaluation in context of an email, webpage, instant message or network configuration. We will also put into place a system that is designed to make additional automated decision and deny access request if warranted. It’s important to acknowledge human error and put a system in place that has both warning capabilities and self-response time.

Software implementation and automate safeguards which are consistent with Information Security critical for data and systems defense.

1. The establishment of an AI SEPCOP software system.

2. The adoption of software security controls framework for today’s technology

3. The software will regularly assess the effectiveness of the security metrics and effectiveness.

Information Systems Development Lifecycle

• Protect organization with more AI SEPCO

o Identify and isolate vulnerabilities

o Use system matrix and AI analytics to resolve expected vulnerabilities

• Compliance requirements

• Proactive, instead of reactive

• Coordinate system checks and eliminate redundancies

• Improve productivity

• Cost

• Reduce cost of fixes and organizational damage by 40%

• IT spent between 3.2% to 3.5% of revenue

Project Goals

1. Schedule – 2-year project

2. Cost – Approved Budget

3. Quality – Highly aware employees / Less than 10% change control requests

Software is available for installation and testing. The challenge is to integrate all systems under one secure network.

● Identify areas of greatest risk

● Help educate resource allocation towards areas of greatest security gain

● Educate senior management on possible business impacts of our security solution

● Provide a method to monitor the effectiveness of our policy and technological changes over time

Budget – The project will require capital for employee travel and hotel to the company site. Food and accommodation is also a factor while considering unexpected events.

Training – Provide trading and engagement meetings for change control and maintenance.

Equipment – Network integration for all organizational systems, including remote and mobile devices

Manuals – User and Training manuals

Goal – Secure information environment

Metric – Information will be processed and baselined for simple and accurate analysis

Data Gathering – Analyze completive analytics and procedures

Information Presentation – compile groups and individuals with access and review accessibility procedures.

The project will follow the triple constrains

Time: The project must be delivered in time for immediate impact. The organization expects to present a major milestone and development to stakeholders to earn trust and developed a business continuity plan

Cost: Project should be within budget based on approved baselines

Milestones: To avoid scope creep and unwarranted change request, an approval and sign of process has been developed on every milestone completion

Business Continuity: Software should be implemented without interrupting live operations

Problems identified and expected resolution

Authorized and Unauthorized Devices

Mobile devices and other external devices can gain access without detection using ghost protocols. Using AI SEPCO assists IT and security departments when suspicious changes occur on the network and database

Resolution

Software will implement learned anomalies if unauthorized device appears determine high threat value. VLAN’s and cloud systems will be configured to work with SEPCO to lower the threat and implement isolation.

Application and program software attack

The application layer requires a complex array of defense protocol. The vulnerabilities encountered depend on intrusion detection signature. This layer is also vulnerable and exposed outside world.

Malicious software resolved by AI SEPCO:

Malicious software falls into several general categories:

 Logic bombs (lies dormant until triggered)

 Trojans (Trojan program imitates a useful program of some type while hiding its destructive nature)

 Worms (self-reproducing program that clogged the system

AI SEPCO will run system checks on a loop that can detect hidden code in the system and develop a customized response before trigger. Software is also designed to isolate sector until secure.

Infrastructure systems check

• Indirect web access/3-layer security protocol

• Infrastructure Firewall with AI SEPCO

• Dedicated ERP Firewall

• Vendor and client Authentication

• Privileged access

• System sectors

• Network Access Control

• VPN

• System and Security Event Mg

AI SEPCO gathering data will use an automated multi configuration tool

packet logging

DNS metric

Traffic and email monitoring

Buffer overflows

Memory allocation error

Un-validated user input

Injection

Multi-site scripting

Vulnerable coding practices

Restricted APIs

Memory and resource dumps

Concurrency violations

Infinite AI loops

NULL pointers

This will be monitored in areas of patch latency, test results from automated system security.

{An overview of organization and resource requirements for the system. It should include the following topics:}

{Detail how the project will be managed and identify key personnel and authority relationships}

{Estimates of level of effort requirements in terms of skills, expertise, and strategies for locating and recruiting qualified people.}

{Summary of the executive development and personnel training necessary to support the project}

{Overview of major project activities, timing, and cost. It should include:}

{Generalized description of major functionalities of the system and its interaction and connection with other systems}

{List of work packages and description of each.}

{List of personnel and responsibility for different tasks and other areas of the system}

{Generalized project and task schedules showing major events, milestones}

{Estimates and timing of capital and development expenses for labor, materials, and facilities}

{Listing of things to be tested, including procedures, timing, and persons responsible}

{Procedures for review and decision about requests for changes to any aspect of the project plan}

{Procedures for periodic review of work, noting what is to be reviewed, by whom, when, and according to what standards}

{List of documents to be produced and how they will be organized and maintained}

{Discussion and guidelines showing how the company will convert to or adopt the results of the new project}

{Summary of alternatives in meeting project objectives showing tradeoffs between costs and schedules}

{Contingency plans for areas of greatest uncertainty in terms of potential work failure or missed milestones.}

{Propose certain guidelines for any 3rd party reviews and controls against which the company can assess and improve its delivery system. Assume none existed before.}

{List all assumed, unresolved, ambiguous, out-of-scope, functional and non-functional constraints, etc.}

{An overview of the roles and responsibilities of project participants in the review, approval, and dissemination of information. It should include:}

{Groups, participants, interests, and expectations}

{Discuss the way information will be shared among the project audience members. Include the various events, the communicator, the channels (meetings, emails, VM, etc.), timing, and feedback mechanism}

{List of communication events and its calendar}

{List of communications meetings, content, delivery}

{Outline the approval requirements for all project instruments}

{Outline the requirements for escalation of project risks/issues. Level of escalation, form of notification and response, wait time, etc.}

{Name, address, office, cell, pager, home, email address for all stakeholders and key participants}