IMPLEMENTION PLAN

hill incorporated, llc

Implementation Planning

VERSION HISTORY

TABLE OF CONTENTS

The purpose of the implementation planning is to increase security and security policies for Hill Incorporated, update the hardware and software, better the network. The company wants to develop a multi-year phased approach to have all the sites on the same hardware and software platform. Hill Incorporated is also under pressure for several of its competitors in the logistics industry. The competitive market is driving Hill Incorporated to improve its routes, delivery methods, fleet vehicles, and other facets of its business to increase profits and to reduce cost. Updating the hardware and software will help the company reach the goals that they are trying to achieve.

· Increase security and security policies to Data Center, Brazil, and Poland

· Update all the hardware and software

· All the sites have the same hardware and software platforms

· Better the network

· That we will be on a deadline

· That we will have to stay on budget

· We will have to follow all guidelines and compliance laws

· Construction on any of the buildings

· Security Policies that already in place

The potential impacts of completing all the designed solution will increase productivity in the company. The internet speeds will increase to a faster and more reliable network. The company will experience less downtime due to the SLA with the Internet Provider. This is ensure the company will stay up and running. The company network security will also increase, which means there is a less of a chance of attackers on the network. All this potential impacts will help the company which in the long run will help the business make more money.

Senior Management

· Ultimately responsible for all organizational risk, including information technology (IT)

· Develops strategic initiatives associated with risk and risk management

· Ensures necessary resources are applied effectively

· Assigns and manages risk management responsibilities throughout the organization

· Assesses and incorporates results of risk assessment into decision making

IT Management

· Supports the organization’s information systems

· Responsible for planning, budgeting, and performing information systems security

· Works with individuals and organizations to ensure proper implementation of risk management plan

· Adheres to risk management plan, compliance requirements, and audits

· Develops business continuity, disaster recovery, and incident response plans

System and Information Owners

· Responsible for ensuring that proper controls are in place

· Responsible for changes to the IT systems

· Approve changes to systems

· Understand and support the risk management process

Functional Management

· Responsible for business operations and IT procurement

· Makes trade-off decisions regarding system security

· Enables achievement of risk management goals

Information Security (IS) Management

· Includes IT security program managers and computer security managers

· Responsible for organization’s security program, including risk management

· Introduces appropriate structures and methodologies to help identify, evaluate, and minimize risk

· Acts as consultants, independent of IT; this may be outsourced

Security Awareness Trainers

· Provide training to users of IT systems throughout the organization

· Develop appropriate training materials

· Incorporate risk assessment into training

IT Personnel

· End-user support

· Internal systems and network administration,

· IT physical & logical security administration

· External systems support (Ex: Web administration)

· External security (may include performance checks)

· Staging and test environment administration

Project Manager

· Planning and Defining Scope

· Activity Planning and Sequencing

· Resource Planning

· Developing Schedules

· Time Estimating

· Cost Estimating

· Developing a Budget

· Documentation

· Creating Charts and Schedules

· Risk Analysis

· Managing Risks and Issues

· Monitoring and Reporting Progress

· Team Leadership

· Strategic Influencing

· Business Partnering

· Working with Vendors

· Scalability, Interoperability and Portability Analysis

· Controlling Quality

· Benefits Realization

Team Members

· understanding the purpose and objectives of the project

· ensuring a correct balance between project and non-project work

· working to timescales and within cost constraints

· reporting progress against plan

· producing the deliverables/products to agreed specifications

· reviewing key project deliverables/products

· identifying issues

· identifying risks associated with the project

· working together as a team

· contributing towards successful communication

· contributing towards positive motivation

The Hill Incorporated Implementation Plan provides an outline of activities and steps that are necessary to ensure that the project’s product is available for use by its end-users as originally planned.

Senior Management

· Ultimately responsible for all organizational risk, including information technology (IT)

· Develops strategic initiatives associated with risk and risk management

· Ensures necessary resources are applied effectively

· Assigns and manages risk management responsibilities throughout the organization

· Assesses and incorporates results of risk assessment into decision making

IT Management

· Supports the organization’s information systems

· Responsible for planning, budgeting, and performing information systems security

· Works with individuals and organizations to ensure proper implementation of risk management plan

· Adheres to risk management plan, compliance requirements, and audits

· Develops business continuity, disaster recovery, and incident response plans

System and Information Owners

· Responsible for ensuring that proper controls are in place

· Responsible for changes to the IT systems

· Approve changes to systems

· Understand and support the risk management process

Functional Management

· Responsible for business operations and IT procurement

· Makes trade-off decisions regarding system security

· Enables achievement of risk management goals

Information Security (IS) Management

· Includes IT security program managers and computer security managers

· Responsible for organization’s security program, including risk management

· Introduces appropriate structures and methodologies to help identify, evaluate, and minimize risk

· Acts as consultants, independent of IT; this may be outsourced

Security Awareness Trainers

· Provide training to users of IT systems throughout the organization

· Develop appropriate training materials

· Incorporate risk assessment into training

IT Personnel

· End-user support

· Internal systems and network administration,

· IT physical & logical security administration

· External systems support (Ex: Web administration)

· External security (may include performance checks)

· Staging and test environment administration

Project Manager

· Planning and Defining Scope

· Activity Planning and Sequencing

· Resource Planning

· Developing Schedules

· Time Estimating

· Cost Estimating

· Developing a Budget

· Documentation

· Creating Charts and Schedules

· Risk Analysis

· Managing Risks and Issues

· Monitoring and Reporting Progress

· Team Leadership

· Strategic Influencing

· Business Partnering

· Working with Vendors

· Scalability, Interoperability and Portability Analysis

· Controlling Quality

· Benefits Realization

Team Members

· understanding the purpose and objectives of the project

· ensuring a correct balance between project and non-project work

· working to timescales and within cost constraints

· reporting progress against plan

· producing the deliverables/products to agreed specifications

· reviewing key project deliverables/products

· identifying issues

· identifying risks associated with the project

· working together as a team

· contributing towards successful communication

· contributing towards positive motivation

All employees of Hill Incorporated will have to attend a security awareness training once a year provided by the IT Team. This training will have all information on security for all users such as password security. The users must be trained on how to avoid social engineering. A lot of attackers use this method to get important information out of users to hack into personal or company accounts. The users will be also taught how to avoid phishing from attackers. Attackers use many methods in order to obtain information from user without their knowledge. This is why all employees will be required to attend this training every year.