The systematic integration of the principles of ‘Security by Design’ and ‘Privacy by Design’ in statistical processes is an indispensable element for data protection and resilience of information infrastructures. This study aims to examine how to apply these principles to the Generic Statistical Business Process Model (GSBPM), adopted by the National Institute of Statistics to govern the entire lifecycle of official statistics. The implementation of an Information Security Management System compliant with the international standard ISO/IEC 27001 proposes a structured, proactive and risk mitigation-oriented approach. The proposed methodological approach is based on the Plan-Do-Check-Act (PDCA) continuous improvement cycle with the aim of effectively integrating security and data protection measures at every stage of the statistical process. This process is aimed at raising the standards of quality, reliability and conformity of statistical output.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Security and Privacy By Design for Official Statistics

  • Giuseppe De Marco,
  • Alessia Abbate

摘要

The systematic integration of the principles of ‘Security by Design’ and ‘Privacy by Design’ in statistical processes is an indispensable element for data protection and resilience of information infrastructures. This study aims to examine how to apply these principles to the Generic Statistical Business Process Model (GSBPM), adopted by the National Institute of Statistics to govern the entire lifecycle of official statistics. The implementation of an Information Security Management System compliant with the international standard ISO/IEC 27001 proposes a structured, proactive and risk mitigation-oriented approach. The proposed methodological approach is based on the Plan-Do-Check-Act (PDCA) continuous improvement cycle with the aim of effectively integrating security and data protection measures at every stage of the statistical process. This process is aimed at raising the standards of quality, reliability and conformity of statistical output.