Publication: Privacidad y seguridad en el diseño
Loading...
Official URL
Full text at PDC
Publication Date
2017
Advisors (or tutors)
Editors
Journal Title
Journal ISSN
Volume Title
Publisher
Citations
Exportar
Abstract
Este proyecto aborda el diseño de una metodología para la realización de la evaluación de impacto a la protección de datos, que partiendo de la guía elaborada por la Agencia Española de Protección de datos a tal efecto, incorpora como requisitos de seguridad de los datos, aquellos obtenidos a partir de un análisis de riesgos realizado en base a las normas ISO 27001 (1) e ISO 27002 (2).
El proyecto implementa una solución para la parte de seguridad que ya contempla el enfoque a riesgos que propone el nuevo Reglamento Europeo de Protección de datos (R 679/2016) cuya entrada en vigor será en mayo de 2018 (3). El proyecto presenta un modelo conceptual que recoge los requisitos funcionales de la solución, estructurada en fases y que cuenta con roles relacionados entre sí en un diagrama de flujo.
Además, como ejemplo de implementación de la solución propuesta, se ha desarrollado una herramienta web para ayudar, tanto a empresas como a administraciones, a completar el informe de evaluación de impacto a la protección de datos, que contiene las fases de la metodología junto con la identificación de riesgos y el tratamiento de los mismos.
This project is about the design of a methodology for the accomplishment of the Privacy Impact Assessment (PIA) (4), which, based on the guide developed by the Spanish Agency for Data Protection, incorporates as data security requirements those obtained from a risk analysis carried out on the basis of ISO 27001 (1) and ISO 27002 (2) standards. This project implements a solution for the security part that already contemplates the risk approach proposed by the new European Data Protection Regulation (R 679 2016) which will come into force in May 2018 (3). The project presents a conceptual model that includes the functional requirements of the solution, structured in phases and with roles related in a flow diagram. In addition, as an example of the proposed solution implementation, a web tool has been developed to help, companies and public administrations, to complete the Privacy Impact Assessment report, which contains the phases of the methodology as well as the risks identification and treatment.
This project is about the design of a methodology for the accomplishment of the Privacy Impact Assessment (PIA) (4), which, based on the guide developed by the Spanish Agency for Data Protection, incorporates as data security requirements those obtained from a risk analysis carried out on the basis of ISO 27001 (1) and ISO 27002 (2) standards. This project implements a solution for the security part that already contemplates the risk approach proposed by the new European Data Protection Regulation (R 679 2016) which will come into force in May 2018 (3). The project presents a conceptual model that includes the functional requirements of the solution, structured in phases and with roles related in a flow diagram. In addition, as an example of the proposed solution implementation, a web tool has been developed to help, companies and public administrations, to complete the Privacy Impact Assessment report, which contains the phases of the methodology as well as the risks identification and treatment.
Description
Trabajo de Fin de Grado en Ingeniería del Software (Universidad Complutense, Facultad de Informática, curso 2016/2017)