Hands-On Security in DevOps

Strategy and metrics

To identify current organization business risk profiles, specific to GDPR compliance, it's suggested you define Privacy Impact Assessment (PIA) templates and process to review current data handing risks. The PIA is a tool to identify the privacy risks through the development and operations cycle by the following assessment.

• Whether the information should be collected
• The type of collected information, and related to PII (Personal Identifiable Information)
• Protection and process of handling the information to mitigate any privacy risks.
• Options and explicit consents of the user to collect, handle, edit or remove the information.

Refer to the https://www.bitkom.org/noindex/Publikationen/2017/Leitfaden/170919-LF-Risk-Assessment-ENG-online-final.pdf ...