trademark

6.0 Scalable and Composable Privacy-Preserving Analytics (cont.)
6.5.2 How?
• Anonymized (or de-identified) data safeguards the privacy of consumers while still
making useful information available to marketers or data-mining companies.
• Establish a formal standard for privacy which addresses possible re-identification
methods.
6.6 Incorporate awareness training with focus on
privacy regulations
6.6.1 Why?
To avoid potential litigation issues into the future. There are an increasing number of
laws and regulations that require training and awareness activities related to privacy
issues (e.g., the Health Insurance Portability and Accountability Act (HIPPA) and Health
Information Technology for Economic and Clinical Health Act (HITECH) in the U.S., etc.).
Awareness of these laws and regulations is critical.
6.6.2 How?
Implement awareness training focused on privacy issues and applicable regulations in
each country.
6.7 Use authorization mechanisms
6.7.1 Why?
To secure applications in the infrastructure stack. Over the last years, attackers have
shifted their focus from operating systems to databases to applications.
6.7.2 How?
• Apply secure software development best practices, like OWASP (owasp.org) for Webbased
applications.
• Execute vulnerability assessments and application penetration tests on the application
on an ongoing and scheduled basis.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
34