48 ◾ Information Security Management Handbook
there are many unknowns at the beginning of a project, as well as new discoveries along the way
that may not have been anticipated at the beginning of the effort.
Sequence Activities
Once the activities are known, then the activities need to be sequenced with the proper prece-
dence relationships. Some items can be done concurrently, such as the configuration of a fire-
wall while the incident processes are being developed, however, some items have a sequence that
must be followed in order. If performing a disaster recovery test, the operation system would
need to be installed before the databases, middleware, and applications, and after the virtualized
servers were made available. Project management ...