Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Miguel Ehecatl Morales-Trujillo; Gabriel Alberto Garcia-Mireles

doi:10.1109/QUATIC.2018.00018

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Miguel Ehecatl Morales-Trujillo, Gabriel Alberto Garcia-Mireles

Departamento de Matemáticas

Research output: Contribution to conference › Paper

12 Scopus citations

Abstract

© 2018 IEEE. Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

Original language	American English
Pages	56-64
Number of pages	9
DOIs	https://doi.org/10.1109/QUATIC.2018.00018
State	Published - 26 Dec 2018
Event	Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018 - Duration: 26 Dec 2018 → …

Conference

Conference	Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018
Period	26/12/18 → …

Access to Document

10.1109/QUATIC.2018.00018

Cite this

@conference{c01f463e8a3049509d8911092476a388,

title = "Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector",

abstract = "{\textcopyright} 2018 IEEE. Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.",

author = "Morales-Trujillo, {Miguel Ehecatl} and Garcia-Mireles, {Gabriel Alberto}",

year = "2018",

month = dec,

day = "26",

doi = "10.1109/QUATIC.2018.00018",

language = "American English",

pages = "56--64",

note = "Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018 ; Conference date: 26-12-2018",

}

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector. / Morales-Trujillo, Miguel Ehecatl; Garcia-Mireles, Gabriel Alberto.
2018. 56-64 Paper presented at Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018.

Research output: Contribution to conference › Paper

TY - CONF

T1 - Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

AU - Morales-Trujillo, Miguel Ehecatl

AU - Garcia-Mireles, Gabriel Alberto

PY - 2018/12/26

Y1 - 2018/12/26

N2 - © 2018 IEEE. Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

AB - © 2018 IEEE. Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

UR - https://www.scopus.com/inward/record.uri?partnerID=HzOxMe3b&scp=85061317832&origin=inward

UR - https://www.scopus.com/inward/citedby.uri?partnerID=HzOxMe3b&scp=85061317832&origin=inward

U2 - 10.1109/QUATIC.2018.00018

DO - 10.1109/QUATIC.2018.00018

M3 - Paper

SP - 56

EP - 64

T2 - Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018

Y2 - 26 December 2018

ER -

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this