PRIVACY IMPACT ASSESSMENT

Cryptography Study of secure communication techniques Authentication Verification of user identity Cyber Attacks Malicious attempts to disrupt or gain unauthorized access Access Control Restricting user access to resources Network Security Protection of network infrastructure Privacy & Online Rights Protection of personal information online Social Engineering Manipulating individuals to divulge confidential information Firewalls Security barriers to prevent unauthorized access ID...

What is a Privacy Impact Assessment (PIA)? A process for identifying, evaluating, documenting, and mitigating privacy risks throughout the development, implementation, and operation of projects involving Personal Information (PI) or Protected Health Information (PHI). What is the purpose of conducting a PIA? To evaluate potential harms to individuals, assess risks to institutions from privacy breaches, and ensure compliance with privacy laws. What are the benefits of conducting a PIA? 1. Ou...

What is a Privacy Impact Assessment (PIA)? A process to identify and minimize data privacy risks associated with collecting personal information. Why might an organization collect personal data? For various business purposes, such as processing payroll taxes or shipping goods and services. When should an organization complete a PIA? Any time it intends to collect a new data element from an individual.

What two major things do Privacy Impact Assessments do? Assesses privacy risk and applicable laws, regulations and policies at every part of the data lifecycle. Recommends steps to mitigate risk. What is a Privacy Impact Assessment? An evaluation performed to verify that a new or existing organizational process adheres to all appropriate privacy laws, regulations and policies Name some events that might trigger a Privacy Impact Assessment. Creation of a new product or service A new or u...

Threat Event An event or situation with potential undesirable consequences Technical Access Control Type where user ID and password system belong Organization Level Strategy Tier 1 strategy involving risk assessment, mitigation, and monitoring Adversary Individual or entity conducting detrimental activities NVD U.S. gov repository for vulnerability data and NIST standards Leveraged Authorization Authorization involving multiple agencies with minimal boundaries Correcting Control Weak...

What is a Privacy Impact Assessment (PIA)? A process to identify and minimize data privacy risks associated with collecting personal information. Why might an organization collect personal data? For various business purposes, such as processing payroll taxes or shipping goods and services. When should an organization complete a PIA? Any time it intends to collect a new data element from an individual. What types of personal data might require a PIA? Name, date of birth, age, race, sex, ad...