II. Privacy Policy Primer
Seven 15-minute, interactive training modules comprise the Privacy Policy Primer. These modules are designed for agency leaders, enterprise architects, privacy officers, project managers, technology directors, business analysts, developers, and others who wish to learn the fundamentals of the Privacy Policy Technical Framework of the Global Justice Information Sharing Initiative (Global).
-
Lesson 1: Privacy and Security Policies
The introductory lesson sets the stage for the course and addresses these two questions: Is an access-control policy required for your information-sharing endeavor? If so, what resources are available to guide the development of this policy?
View -
Lesson 2.1: Requester, Content, Rule, and Context Metadata
Enabling technical enforcement of privacy policies in multi-agency information-sharing systems requires consensus about data markup. This lesson presents the business case for the technical standards adopted in the Global Privacy Policy Technical Framework.
View -
Lesson 2.2: Policy Matrix Approach
How are “human readable” policies translated into “machine readable” policies? This lesson presents proven techniques.
View -
Lesson 3.1: Defining Privacy and Security Architectures
This lesson presents the technical architecture that enables interoperability from the request message routing, to access control decisions, through maintenance of machine-enforceable rules.
View -
Lesson 3.2: Authentication and Access Control
How do you know that requester “Jane Doe” is really the Jane Doe who is authorized to access protected data? How can you enforce fine-grained authorization rules?
View -
Lesson 3.3: Data Standards
More details about three key data standards are presented here: GFIPM for requester attributes, NIEM for the attributes of requested information, and XACML as the policy authoring language that brings them all together.
View -
Lesson 4: Identity Federations and Implementation Guidance
The goal is to describe some of the open-source and commercial software solutions that are available now. It’s full of practical tips for real-world implementation.
View -
