ISO/IEC TR 27550:2019 情報技術—セキュリティ技術—システムライフサイクルプロセスのプライバシーエンジニアリング | ページ 6

3.1

activity

set of cohesive tasks of a process

[SOURCE: ISO/IEC/IEEE 15288:2015]

3.2

availability

property of being accessible and usable upon demand by an authorized entity

[SOURCE: ISO/IEC/IEEE 27000:2018]

3.3

confidentiality

property that information is not made available or disclosed to unauthorized individuals, entities, or processes

[SOURCE: ISO/IEC/IEEE 27000:2018]

3.4

disassociability

property that enables the processing of PII or events without association to individuals or devices beyond the operational requirements of the system

[SOURCE: NISTIR 8062]

3.5

integrity

property of accuracy and completeness

[SOURCE: ISO/IEC 27000:2018]

3.6

intervenability

property that ensures that PII principals, PII controllers, PII processors and supervisory authorities can intervene in all privacy-relevant data processing

Note 1 to entry: the extent to which any of these stakeholders can intervene in data processing may be limited by relevant legislation or regulation.

[SOURCE: ULD]

3.7

manageability

property that provides the capability for granular administration of PII including alteration, deletion, and selective disclosure

[SOURCE: NISTIR 8062]

3.8

personally identifiable information

PII

any information that (a) can be used to identify the PII principal to whom such information relates, or (b) is or might be directly or indirectly linked to a PII principal

Note 1 to entry: To determine whether a PII principal is identifiable, account should be taken of all the means which can reasonably be used by the privacy stakeholder holding the data, or by any other party, to identify that natural person.

[SOURCE: ISO/IEC 29100:2011]

3.9

PII controller

privacy stakeholder (or privacy stakeholders) that determines the purposes and means for processing personally identifiable information (PII) other than natural persons who use data for personal purposes

Note 1 to entry: A PII controller sometimes instructs others (e.g., PII processors) to process PII on its behalf while the responsibility for the processing remains with the PII controller.

[SOURCE: ISO/IEC 29100:2011]

3.10

PII principal

natural person to whom the personally identifiable information (PII) relates

Note 1 to entry: Depending on the jurisdiction and the particular PII protection and privacy legislation, the synonym “data subject” can also be used instead of the term “PII principal”.

[SOURCE: ISO/IEC 29100:2011]

3.11

PII processor

privacy stakeholder that processes personally identifiable information (PII) on behalf of and in accordance with the instructions of a PII controller

[SOURCE: ISO/IEC 29100:2011]

3.12

predictability

property that enables reliable assumptions by individuals, owners, and operators about PII and its processing by a system

[SOURCE: NISTIR 8062]

3.13

privacy breach

situation where personally identifiable information is processed in violation of one or more relevant privacy safeguarding requirements

[SOURCE: ISO/IEC 29100:2011]

3.14

privacy engineering

integration of privacy concerns into engineering practices for systems and software engineering life cycle processes

3.15

privacy principles

set of shared values governing the privacy protection of personally identifiable information (PII) when processed in information and communication technology systems

[SOURCE: ISO/IEC 29100:2011]

3.16

privacy risk

effect of uncertainty on privacy

[SOURCE: ISO/IEC 29100:2011]

Note 1 to entry: Risk is defined as the “effect of uncertainty on objectives” in ISO Guide 73 and ISO 31000.

Note 2 to entry: Uncertainty is the state, even partial, of deficiency of information related to, understanding or knowledge of, an event, its consequence, or likelihood.

3.17

privacy risk source

element which alone or in combination with other elements has the intrinsic potential to give rise to privacy risk (3.16)

Note 1 to entry: also referred to as privacy risk factor in NISTIR 8062^[18].

Note 2 to entry: also referred to as privacy threat in LINDDUN^[22].

3.18

process

set of interrelated or interacting activities which transform inputs into outputs

[SOURCE: ISO/IEC 27000:2018]

3.19

process outcome

observable result of the successful achievement of the process purpose

[SOURCE: ISO/IEC/IEEE 15288:2015]

3.20

processing of PII

operation or set of operations performed upon personally identifiable information (PII)

Note 1 to entry: examples of processing operations of PII include, but are not limited to, the collection, storage, alteration, retrieval, consultation, disclosure, anonymization, pseudonymization, dissemination or otherwise making available, deletion or destruction of PII.

Note 2 to entry: also referred to as data action in NISTIR 8062^[18]

[SOURCE: ISO/IEC 29100:2011]

3.21

risk

effect of uncertainty on objectives

[SOURCE: ISO/IEC 31000:2018]

3.22

task

required, recommended, or permissible action, intended to contribute to the achievement of one or more outcomes of a process

[SOURCE: ISO/IEC/IEEE 15288:2015]

3.23

touch point

intersections of data flows across domains or systems or processes within domains

[SOURCE: OASIS PMRM]

3.24

transparency

property that ensures that all privacy-relevant data processing including the legal, technical and organizational setting can be understood and reconstructed

[SOURCE: ULD]

3.25

unlinkability

property that ensures that a PII principal may make multiple uses of resources or services without others being able to link these uses together

[SOURCE: ULD]