ITC 568 CLOUD PRIVACY ANS SECURITY

TASK 1

BY DEEPAK KANSRA

Personal Identifiable Information is any data that distinguishes the information of one individual from that of another. These are personal information that must not be leaked as they pose a threat to the privacy of information Katsuno et.al, (2016).

The information system plays a crucial role in providing services of technology. The sensitive information needs to be secured properly so that there is no issue of information leakage of private information.  The threat and risk assessment procedure help in maintaining confidentiality of information. It ensures that all the information is in place and there is effective confidentiality.

Threat and risk assessment procedure:

Data security and risk assessment are a major component of protecting the data confidentiality. The annual risk assessment must be conducted by organizations so that effective controls are established. The process of risk assessment includes:

Identification of issue:

The risk assessment procedure includes finding out the risk associated with the cloud software so that proper steps of mitigation is ensured. The issue in the current scenario is associated with the leakage of information due to sharing of information on a single system. The centralised system adopted by government is to support applications and administration for virtually all support services. The main aim of this software is to have a single workflow for all support services Deng, (2015).

Identifying the data at risk:

The data that is stored in the computer software of charity includes reliable personal information about the disadvantaged clients including information about their health and personal details. This information is essentially confidential information that must not be leaked. The government has decided to register each client on the MySupport portal so as to create an individual informal digital identity. This will help in providing support services. The organization needs to identify the data that is at risk.
BY GURDEEP KUMAR

Implementing controls:

The government needs to identify ways so that the data privacy can be managed effectively. The government has decided to register the clients on a MySupport portal to create an informal identity. This will allow all the support services, applications, supporting data, documents, renewal dates and other associated information for viewing the digital identity. This method will help in implanting planning effectively. This will also simplify the process of providing support services so that they only need to go on a single page to view information.