Practical Internet of Things Security - Second Edition

Privacy-engineering activities

Privacy engineering in a larger organization should consist of a dedicated department of individuals with the minimum qualifications listed above. Smaller organizations may not have dedicated departments, but may need to improvise by cross-training and adding privacy-engineering duties to individuals engaged in other facets of the engineering process. Security engineers tend to be naturally adept at this. Irrespective of the size and scope of a project or program, at least one dedicated privacy engineer should be allocated at the inception of the program to ensure that privacy needs are addressed. Ideally, this individual or set of individuals will be associated with the project throughout its development.