O3.6 Establish multi-layered security controls to protect data throughout its lifecycle

Principle

O3 Ensure data privacy by design

Risk

RI4 Disempowerment

SV4 Technical shortcomings

RS1 Privacy Vulnerability

Lifecycle Stage

L2 Strategy and Design

Practices

• Use best security practices, including enabling 2FA by default for users (and/or combining such practices with automated fraud detection practices to detect anomalous activity).

• Implement encryption protocols that protect all data throughout its transmission and storage. Example: How Estonian xRoad is secured (data storage)

Resources

Case Study

( to come soon..)

References

Department of Homeland Security. Privacy Impact Assessments.