Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Miguel Ehecatl Morales-Trujillo; Gabriel Alberto Garcia-Mireles

doi:10.1109/QUATIC.2018.00018

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Miguel Ehecatl Morales-Trujillo, Gabriel Alberto Garcia-Mireles

Departamento de Matemáticas

Producción científica: Capítulo del libro/informe/acta de congreso › Contribución a la conferencia › revisión exhaustiva

12 Citas (Scopus)

Resumen

Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

Idioma original	Inglés
Título de la publicación alojada	Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018
Editorial	Institute of Electrical and Electronics Engineers Inc.
Páginas	56-64
Número de páginas	9
ISBN (versión digital)	9781538658413
DOI	https://doi.org/10.1109/QUATIC.2018.00018
Estado	Publicada - 26 dic. 2018
Evento	11th International Conference on the Quality of Information and Communications Technology, QUATIC 2018 - Coimbra, Portugal Duración: 4 sep. 2018 → 7 sep. 2018

Serie de la publicación

Nombre	Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018

Conferencia

Conferencia	11th International Conference on the Quality of Information and Communications Technology, QUATIC 2018
País/Territorio	Portugal
Ciudad	Coimbra
Período	4/09/18 → 7/09/18

Nota bibliográfica

Publisher Copyright:
© 2018 IEEE.

Acceder al documento

10.1109/QUATIC.2018.00018

Otros archivos y enlaces

http://www.scopus.com/inward/record.url?scp=85061317832&partnerID=8YFLogxK

Citar esto

Morales-Trujillo, M. E., & Garcia-Mireles, G. A. (2018). Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector. En Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018 (pp. 56-64). Artículo 8590171 (Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/QUATIC.2018.00018

Morales-Trujillo, Miguel Ehecatl ; Garcia-Mireles, Gabriel Alberto. / Extending ISO/IEC 29110 basic profile with privacy-by-design approach : A case study in the health care sector. Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018. Institute of Electrical and Electronics Engineers Inc., 2018. pp. 56-64 (Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018).

@inproceedings{b0f22d9542e54a21b85eaef9d9cbd83b,

title = "Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector",

abstract = "Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.",

keywords = "GDPR, Privacy by design, Software development, Software engineering, Very small entity",

author = "Morales-Trujillo, {Miguel Ehecatl} and Garcia-Mireles, {Gabriel Alberto}",

note = "Publisher Copyright: {\textcopyright} 2018 IEEE.; 11th International Conference on the Quality of Information and Communications Technology, QUATIC 2018 ; Conference date: 04-09-2018 Through 07-09-2018",

year = "2018",

month = dec,

day = "26",

doi = "10.1109/QUATIC.2018.00018",

language = "Ingl{\'e}s",

series = "Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "56--64",

booktitle = "Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018",

address = "Estados Unidos",

}

Morales-Trujillo, ME & Garcia-Mireles, GA 2018, Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector. En Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018., 8590171, Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018, Institute of Electrical and Electronics Engineers Inc., pp. 56-64, 11th International Conference on the Quality of Information and Communications Technology, QUATIC 2018, Coimbra, Portugal, 4/09/18. https://doi.org/10.1109/QUATIC.2018.00018

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector. / Morales-Trujillo, Miguel Ehecatl; Garcia-Mireles, Gabriel Alberto.
Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018. Institute of Electrical and Electronics Engineers Inc., 2018. p. 56-64 8590171 (Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018).

Producción científica: Capítulo del libro/informe/acta de congreso › Contribución a la conferencia › revisión exhaustiva

TY - GEN

T1 - Extending ISO/IEC 29110 basic profile with privacy-by-design approach

T2 - 11th International Conference on the Quality of Information and Communications Technology, QUATIC 2018

AU - Morales-Trujillo, Miguel Ehecatl

AU - Garcia-Mireles, Gabriel Alberto

PY - 2018/12/26

Y1 - 2018/12/26

N2 - Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

AB - Privacy related elements have become an essential part of any information system. Previous studies reveal a scarcity of research on privacy in software processes, few engineering practices and a lack of methodological support to address privacy requirements in software systems. Introducing Privacy-by-Design (PbD) into software developments is an advantageous solution to tackle privacy related concerns. This paper presents an integration of PbD goals into the ISO/IEC 29110 Basic profile for small software development organizations. The most frequently encountered privacy goals as well as privacy addressing practices from previous methodological proposals were taken into account and included in the form of tasks, work products and roles. As a practical example, we describe a real life project development of a health care system that motivated the creation of the ISO/IEC 29110 PbD extension.

KW - GDPR

KW - Privacy by design

KW - Software development

KW - Software engineering

KW - Very small entity

UR - http://www.scopus.com/inward/record.url?scp=85061317832&partnerID=8YFLogxK

U2 - 10.1109/QUATIC.2018.00018

DO - 10.1109/QUATIC.2018.00018

M3 - Contribución a la conferencia

AN - SCOPUS:85061317832

T3 - Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018

SP - 56

EP - 64

BT - Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 4 September 2018 through 7 September 2018

ER -

Morales-Trujillo ME, Garcia-Mireles GA. Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector. En Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018. Institute of Electrical and Electronics Engineers Inc. 2018. p. 56-64. 8590171. (Proceedings - 2018 International Conference on the Quality of Information and Communications Technology, QUATIC 2018). doi: 10.1109/QUATIC.2018.00018

Extending ISO/IEC 29110 basic profile with privacy-by-design approach: A case study in the health care sector

Resumen

Serie de la publicación

Conferencia

Nota bibliográfica

Acceder al documento

Otros archivos y enlaces

Huella

Citar esto