Cognos project security is implemented through packages (which control what data users can access) combined with users, groups, and roles managed through Access Manager. This layered approach grants or restricts access to specific reports, models, and data based on organizational roles.