Joshua Coles
Tool-supporting data protection impact assessments with CAIRIS.
Coles, Joshua; Faily, Shamal; Ki-Aries, Duncan
Authors
Shamal Faily
Duncan Ki-Aries
Contributors
Kristian Beckers
Editor
Shamal Faily
Editor
Seok-Won Lee
Editor
Nancy Mead
Editor
Abstract
The General Data Protection Regulation (GDPR) encourages the use of Data Protection Impact Assessments (DPIAs) to integrate privacy into organisations' activities and practices from early design onwards. To date, however, there has been little prescription about how Security & Privacy Requirements Engineering processes map to the necessary activities of a DPIA, and how these activities can be tool-supported. To address this problem, we present a tool-supported process for undertaking DPIAs using existing Requirements Engineering approaches and the CAIRIS platform. We illustrate this process using a real-world case study example where it was used to elicit privacy risks for a prototype medical application to support chemotherapy treatment.
Citation
COLES, J., FAILY, S. and KI-ARIES, D. 2018. Tool-supporting data protection impact assessments with CAIRIS. In Beckers, K., Faily, S., Lee, S.-W. and Mead, N. (eds.) Proceedings of the 5th International workshop on evolving security and privacy requirements engineering (ESPRE 2018), 20 August 2018, Banff, Canada. Los Alamitos: IEEE Computer Society [online], pages 21-27. Available from: https://doi.org/10.1109/ESPRE.2018.00010
Presentation Conference Type | Conference Paper (published) |
---|---|
Conference Name | 5th International workshop on evolving security and privacy requirements engineering (ESPRE 2018) |
Start Date | Aug 20, 2018 |
Acceptance Date | Jul 6, 2018 |
Online Publication Date | Oct 22, 2018 |
Publication Date | Dec 31, 2018 |
Deposit Date | Sep 17, 2021 |
Publicly Available Date | Dec 15, 2021 |
Publisher | IEEE Computer Society |
Peer Reviewed | Peer Reviewed |
Pages | 21-27 |
ISBN | 9781538684214 |
DOI | https://doi.org/10.1109/ESPRE.2018.00010 |
Keywords | Data protection; Privacy and computing; General Data Protection Regulation (GDPR); Security risk analysis; Systems security; Requirements engineering; Computer-aided integration of requirements and information security (CAIRIS) |
Public URL | https://rgu-repository.worktribe.com/output/1437875 |
Files
COLES 2018 Tool-supporting data protection
(573 Kb)
PDF
Copyright Statement
© IEEE
You might also like
Privacy goals for the data lifecycle.
(2022)
Journal Article
Assessing system of systems information security risk with OASoSIS.
(2022)
Journal Article
Visualising personas as goal models to find security tensions.
(2021)
Journal Article
Evaluating privacy: determining user privacy expectations on the web.
(2021)
Journal Article
DPIA in context: applying DPIA to assess privacy risks of cyber physical systems.
(2020)
Journal Article