trusted entity that issues or registers Credential, credential “A service provider Subscriber tokens and issues electronic credentials to Subscribers. The CSP may encompass Registration Authorities (RAs) and Verifiers that it operates. A CSP may be an independent third party, or may issue credentials for its own use. Criticality, criticality Not all privacy data elements or tools level may be equal Cryptographic binding two or more related “Associating elements of information using cryptographic techniques. “ Conformance to privacy fabric XXX Data integrity (privacy Mis-identification (e.g., TSA list) corruption) Default classification (for privacy data, or privacy tooling) Digital forensics As applied to privacy fabric: still emerging; check academic lit End-to-end privacy TBD XXX IEEE P7000, IEEE Traceability of ethics and value chain Ethics in Design P7002, IEEE P7007, are seen as no less feasible than ISO 27500 requirements tracing, but no more straightforward either. CNSSI-4009 Subset of events in a Event (privacy) “Any observable occurrence appropriate to system and/or network. Events privacy sometimes provide indication that an incident is occurring.
Credential, credential service provider “A trusted entity that issues or registers Subscriber tokens and issues electronic credentials to Subscribers. The CSP may encompass Registration Authorities (RAs) and Verifiers that it operates. A CSP may be an independent third party, or may issue credentials for its own use. Criticality, criticality level Not all privacy data elements or tools may be equal Cryptographic binding “Associating two or more related elements of information using cryptographic techniques. “ Conformance to privacy fabric XXX Data integrity (privacy corruption) Mis-identification (e.g., TSA list) Default classification (for privacy data, or privacy tooling) Digital forensics As applied to privacy fabric: still emerging; check academic lit End-to-end privacy XXX TBD Ethics in Design IEEE P7000, IEEE P7002, IEEE P7007, ISO 27500 Traceability of ethics and value chain are seen as no less feasible than requirements tracing, but no more straightforward either. Event (privacy) CNSSI-4009 Subset of events appropriate to privacy “Any observable occurrence in a system and/or network. Events sometimes provide indication that an incident is occurring.