An Introduction to Privacy Engineering and Risk Management in Federal Systems

Brooks, Sean; Garcia, Michael; Lefkovitz, Naomi; Lightman, Suzanne; Nadeau, Ellen

doi:https://doi.org/10.6028/NIST.IR.8062

NISTIR 8062

An Introduction to Privacy Engineering and Risk Management in Federal Systems

Documentation Topics

Date Published: January 2017

Author(s)

Sean Brooks (NIST), Michael Garcia (NIST), Naomi Lefkovitz (NIST), Suzanne Lightman (NIST), Ellen Nadeau (NIST)

Abstract

This document provides an introduction to the concepts of privacy engineering and risk management for federal systems. These concepts establish the basis for a common vocabulary to facilitate better understanding and communication of privacy risk within federal systems, and the effective implementation of privacy principles. This publication introduces two key components to support the application of privacy engineering and risk management: privacy engineering objectives and a privacy risk model.

Keywords

computer security; cybersecurity; information security; privacy; risk management; systems engineering

Control Families

Risk Assessment

Documentation

Publication:
NISTIR 8062 (DOI)
Local Download

Supplemental Material:
"Making Privacy Concrete (three words not usually found together)" (blog post) (other)

Related NIST Publications:
ITL Bulletin

Document History:
05/28/15: NISTIR 8062 (Draft)
01/04/17: NISTIR 8062 (Final)

Topics

Security and Privacy
privacy; risk management

Laws and Regulations
OMB Circular A-130