78 Table of Contents EXECUTIVE SUMMARY 1 1. INTRODUCTION 3 PURPOSE 3 SCOPE 3 AUDIENCE 4 DOCUMENT ORGANIZATION 5 BACKGROUND 6 2. RISK MANAGEMENT & ITS APPLICABILITY TO PRIVACY 12 SYSTEM OBJECTIVES CYBERSECURITY RISK MANAGEMENT 17 IN PRIVACY ENGINEERING OBJECTIVES 18 A PRIVACY RISK MODEL 22 4. NEXT STEPS 27 APPENDICES 28 APPENDIX A: GLOSSARY 29 APPENDIX B: ACRONYMS 30 APPENDIX C: FORMAL MATHEMATICAL STATEMENT PRIVACY RISK MODEL 31 OF THE APPENDIX D: PRIVACY RISK ASSESSMENT METHODOLOGY 32 APPENDIX E: CATALOG PROBLEMATIC DATA ACTIONS 54 OF APPENDIX F: CATALOG PROBLEMS INDIVIDUALS 55 OF FOR APPENDIX G: CATALOG CONTEXTUAL FACTORS 56 OF APPENDIX H: REFERENCES 57 102 103
78 Table of Contents EXECUTIVE SUMMARY 1 1. INTRODUCTION 3 PURPOSE 3 SCOPE 3 AUDIENCE 4 DOCUMENT ORGANIZATION 5 BACKGROUND 6 2. RISK MANAGEMENT & ITS APPLICABILITY TO PRIVACY 12 SYSTEM OBJECTIVES IN CYBERSECURITY RISK MANAGEMENT 17 PRIVACY ENGINEERING OBJECTIVES 18 A PRIVACY RISK MODEL 22 4. NEXT STEPS 27 APPENDICES 28 APPENDIX A: GLOSSARY 29 APPENDIX B: ACRONYMS 30 APPENDIX C: FORMAL MATHEMATICAL STATEMENT OF THE PRIVACY RISK MODEL 31 APPENDIX D: PRIVACY RISK ASSESSMENT METHODOLOGY 32 APPENDIX E: CATALOG OF PROBLEMATIC DATA ACTIONS 54 APPENDIX F: CATALOG OF PROBLEMS FOR INDIVIDUALS 55 APPENDIX G: CATALOG OF CONTEXTUAL FACTORS 56 APPENDIX H: REFERENCES 57 102 103
nistir_8062_draft.docx