# Information Security in Project Management

## Objective

The purpose of this policy is to define the way in which FundApps addresses information security in project management.

## Scope

This policy applies to all FundApps projects that have a potential for impacting FundApps Information System or FundApps data as defined in the [Data Classification and Protection Standard](/client-portal/-LubIC9uIsME-_T0mNXu/fundapps-policies/risk-management/data-classification.md).

## Policy

Information Security must be addressed for all FundApps projects in scope of this policy.

FundApps projects must include information security requirements.

An information security risk assessment must be conducted at an early stage of the project to identify necessary controls.

Information security must be applied to all the phases of the applied project methodology.

A list of requirements for new projects is defined in FundApps knowledge management tool [\[Accessible only to FundApps Staff\]](https://www.notion.so/fundapps/Security-requirements-for-new-projects-teams-67e34146d5a2444db6bb81cb3a9b7d85)

### Roles and responsibilities

The product manager is responsible for ensuring the project complies with this policy. The Head of Information Security is responsible for ensuring this policy is aligned with FundApps' business objectives.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://policies.fundapps.co/client-portal/-LubIC9uIsME-_T0mNXu/fundapps-policies/infosec/information-security-in-project-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.