EnCoRe: Towards a Holistic Approach to Privacy

: EnCoRe: Towards a holistic approach to privacy Nick Papanikolaou, Sadie Creese, Michael Goldsmith, Marco Casassa Mont, Siani Pearson HP Laboratories HPL-2010-83 privacy policies, policy hierarchy, policy refinement Privacy requirements for IT systems and solutions arise from a variety of sources, including legislation, sector-specific regulation, organisational guidelines, social and user expectations. In this paper we present and discuss a holistic approach to the management of privacy - explored in the context of the EnCoRe project - which takes into account the need to deal with these different types of policies, at different levels action as well as risk assessment methods to assess them based on specific threats, needs and constraints. We discuss examples of privacy requirements and related policies coming from different sources. We then present how a 'privacy-aware risk assessment' approach (which leverages and extends traditional security-driven risk assessment appr...

• Type: Journal
• Year: 2010
• Where: SECRYPT
• Authors: Nick Papanikolaou, Sadie Creese, Michael Goldsmith, Marco Casassa Mont, Siani Pearson
• Keywords: Business, Privacy, Privacy Requirements, Risk Assessment, SECRYPT 2010