The privacy engineer's manifesto: Getting from policy to code to QA to value

The Privacy Engineer's Manifesto: Getting from Policy to Code to QA to Value

Volumn , Issue , 2014, Pages 1-362

  Dennedy, Michelle Finneran ^a   Fox, Jonathan ^a,b   Finneran, Thomas R ^c  

^a McAfee   (United States)

^b Columbia University ^*  (United States)

^c NONE

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; COMPUTATION THEORY; ECONOMIC AND SOCIAL EFFECTS; ENGINEERS; INDUSTRIAL ECONOMICS; INFORMATION DISSEMINATION; INFORMATION MANAGEMENT; INNOVATION; LIFE CYCLE; PRODUCT DESIGN;

COMPUTATIONAL SCIENCE; DEVELOPMENT METHODOLOGY; FAIR INFORMATION PRACTICES; INFORMATION REVOLUTION; MULTIPLE STAKEHOLDERS; PRIVACY ENGINEERINGS; SYSTEM ADMINISTRATORS; TECHNOLOGY REVOLUTION;

DATA PRIVACY;

EID: 84954624821     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-1-4302-6356-2     Document Type: Book

References (59)

1. David Moschella, Doug Neal, John Taylor, and Piet Opperman, Consumerization of Information Technology. Leading Edge Forum, 2004. http://lef.csc.com/projects/70.
2. Erik Larson, The Devil in the White City. New York: Vintage Books, 2003.
3. Samuel Warren and Louis Brandeis, “The Right To Privacy,” Harvard Law Review, 4, no. 193 (1890). www.english.illinois.edu/-people-/faculty/debaron/582/582%20readings/right%20to%20privacy.pdf
4. David Golinkin, “The Right to Privacy in Judaism,” David Golinkin, Schechter Institute of Jewish Studies, http://www.myjewishlearning.com/practices/Ethics/Business_Ethics/Contemporary_Issues/Privacy/A_Responsum.shtml.
5. Abdul Raman Saad, Abdul Raman Saad & Associates, Malaysia, 1981, page 3.
6. Abdul Raman Saad, “Information Privacy and Data Protection A Proposed Model for the Kingdom Of Saudi Arabia,” Abdul Raman Saad, Abdul Raman Saad & Associates, Malaysia, 1981, page 29.
7. Abdul Raman Saad, Catechism of the Catholic Church, Libreria Editrice Vaticana, Citta del Vaticano, http://www.vatican.va/archive/ENG0015/_INDEX.HTM, 1993.
8. Organisation for Economic Cooperation and Development (OECD), “OECD Guidelines on theProtection of Privacy and Transborder Flows of Personal Data” (September 23, 1980). www.oecd.org/internet/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata.htm.
9. UK Information Commissioner, “Employment Statutory Code of Practice” (2008).
10. Federal Trade Commission, “Protecting Consumer Privacy in an Era of Rapid Change: Recommendations For Businesses and Policymakers,” p. 43. www.ftc.gov/os/2012/03/120326privacyreport.pdf.
11. Yael Onn et al., Privacy in the Digital Environment. Haifa Center of Law & Technology, 2005.
12. “DAMA-DMBOK Guide (Data Management Body of Knowledge) Introduction & Project Status.” www.dama.org/files/public/DI_DAMA_DMBOK_Guide_Presentation_2007.pdf.
13. B. Van Halle and C. Fleming, Handbook of relational database design, Addison-Wesley, 1989, p. 16.
14. Resolution on Privacy by Design, 32nd International Conference of Data Protection and Privacy Commissioners, Jerusalem, Israel. www.justice.gov.il/NR/rdonlyres/F8A79347-170C-4EEFA0AD-155554558A5F/26502/ResolutiononPrivacybyDesign.pdf.
15. Foundational Principles, Privacy by Design. www.privacybydesign.ca/index.php/about-pbd/7-foundational-principles/.
16. OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data are available at www.oecd.org/document/18/0,3343, en_2649_201185_1815186_1_1_1_1,00.html.
17. Generally Accepted Privacy Principles (GAPP), along with additional information about the development and additional privacy resources, can be found at www.aicpa.org/privacy.
18. European Union’s Directive on Data Protection is available at http://ec.europa.eu/justice_home/fsj/privacy/index_en.htm.
19. Looney Labs, Fluxx is a product from Looney Labs, available online at www.looneylabs.com/games/fluxx. or at local retailers.
20. Tom Finneran, The enterprise architecture section is based on two much-quoted papers: “Enterprise Architecture: What and Why” by Tom Finneran (www.tdan.com/i007ht03.htm).
21. Tom Finneran, “Enterprise Architecture: The What’s And How’s” by Tom Finneran (www.tdan.com/i018ht02.htm).
22. “Manifesto for Agile Software Development” at Agilemanifesto.org.
23. “Use Cases vs. User Stories in Agile Development” and the links within this article at www.boost.co.nz/blog/agile/use-cases-or-user-stories/.
24. Kent Beck, “Test-Driven Development: By Example” (www.eecs.yorku.ca/course_archive/2003-04/W/3311/sectionM/case_studies/money/KentBeck_TDD_byexample.pdf).
25. “Agile Model Driven Development: The Key to Scaling Agile Software Development” at www.agilemodeling.com/essays/amdd.htm.
26. “Is Design Dead?” at http://martinfowler.com/articles/designDead.html.
27. “Modeling in an Agile World” at www.nyu.edu/classes/jcf/CSCI-GA.2440-001/handouts/modellinginanagileworld.pdf.
28. B. Van Halle & C. Fleming, Handbook of Relational Database Designby B. Van Halle & C. Fleming (Addison Wesley, 1989), pp 18-24.
29. F. McFadden and J. Hoffer, Data Base Managementby F. McFadden and J. Hoffer (Benjamin Cummings Publishing, 1985), pp 272-299.
30. T. R. Finneran, “The Bottom Line: Data-oriented Deliverables,” by T. R. Finneran, in Handbook of Data Management(Auerbach Press, 1993), pp 289-298.
31. “What They Know” (November 25, 2013). Wall Street Journal. Retrieved from http://blogs.wsj.com/wtk/.
32. I. Mosquera (August 27, 2011). “Why Mobile Apps Need to Have Privacy Policies.” VentureBeat. Retrieved from http://venturebeat.com/2011/08/27/why-mobile-apps-need-to-haveprivacy-policies/.
33. Privacy Management Reference Model and Methodology (PMRM), Ver. 1.0, March 2012, OASIS Committee Specification Draft. Retrieved from http://docs.oasis-open.org/pmrm/PMRM/v1.0/csd01/PMRM-v1.0-csd01.pdf.
34. OASIS Privacy by Design Documentation Technical Committee (PbD-SE) Charter. Retrieved from www.oasis-open.org/committees/pbd-se/charter.php.
35. Jean de La Fontaine, 1621-1695, Fables as quoted in L. D Eigen and J. P Siegel, The Manager’s Book of Quotations(AMACOM, 1991).
36. F. B. Brooks, Jr., The Mythical Man-Month(Addison-Wesley Publishing Company, 1975), p. 14.
37. J. A. Zachman, “A Framework for Information Systems Architecture,” in Handbook of Data Management(Boston: Auerbach Publications, Warren Gorham Lamont, 1993), pp 3-22.
38. Thomas R. Finneran, “A Component-Based Knowledge Management System” by Thomas R. Finneran at www.tdan.com/i009hy04.htm.
39. Steve Kenny–Privacy Advisors, “An Introduction to Privacy Enabling Technology” by Steve Kenny–Privacy Advisors, at https://www.privacyassociation.org/publications/2008_05_introduction_to_privacy_enhancing_technologies.
40. J. M. Juran, Juran’s quality control handbook. New York: McGraw-Hill, 1988.
41. James Ransome and Anmol Misra, Core Software Security: Security at the Source by James Ransome and Anmol Misra. © 2014 CRC Press. Reprinted with permission. www.crcpress.com/product/isbn/9781466560956.
42. J. Grembi, Secure software development: A security programmer’s guide. Boston: Course Technology, 2008. p. 58.
43. J. Grembi, Secure software development: A security programmer’s guide. Boston: Course Technology, 2008. pp 58-60.
44. J. Grembi, Secure software development: A security programmer’s guide. Boston: Course Technology, 2008. p. 60.
45. J. Grembi, Secure software development: A security programmer’s guide. Boston: Course Technology, 2008. p. 72.
46. Microsoft Corporation. Microsoft Security Development Lifecycle (SDL), Version 3.2. 2012. www.microsoft.com/en-us/download/details.aspx?id=24308.
47. InfoWorld report on Vision Critical study, “Young employees say BYOD a ‘right’ not ‘privilege.’” www.infoworld.com/d/consumerization-of-it/young-employees-say-byod-right-notprivilege-195901.
48. Information Systems Audit and Control Association (ISACA) publication “The Risk IT Practitioner Guide”.
49. Westerman, G., R. Hunter, IT Risk—Turning Business Threats into Competitive Advantage, Harvard Business School Press, 2007.
50. FFIEC Information Security IT Examination Standards; July, 2006, page 4.
51. W. Edward Deming, Out of the Crisis. Cambridge: MIT Press, 2000, p. 24.
52. “Ponemon study shows the cost of a data breach continues to increase.” www.ponemon.org/news-2/23.
53. “Predicting the unpredictable: Detecting chaos in mathematical equations.” www.mit.edu/newsoffice/1998/chaos.html.
54. W. Edwards Deming, The New Economics for Industry, Government, Education, Ch 4 (1994).
55. David Foster Wallace, “This is Water”, Commencement Speech to Kenyon College class of 2005 written by David Foster Wallace.
56. Canadian PIPEDA Case Summary 2009-008 at www.priv.gc.ca/cf-dc/2009/2009_008_0716_e.asp.
57. Julie Layton, “How Pandora Radio Works,” Julie Layton, May 23, 2006. http://computer.howstuffworks.com/internet/basics/pandora.htm.
58. Danah Boyd and Alice Marwick, “Social Privacy in Networked Publics: Teens’ Attitudes, Practices, and Strategies,” Danah Boyd and Alice Marwick, September 2011. www.danah.org/papers/2011/SocialPrivacyPLSC-Draft.pdf.
59. I. Jacobsen, Software Engineering. Addison-Wesley, 1992, p. 159.