It is time to summarize the course! You have made it to the last portion of course content! This section will present you a connected summary of the course content compiled as a reference framework. It will show you when you use the learned approaches in which phase of system design and maintenance. This work is based on the article "Privacy in the life-cycle of IT Services" (Rother, Schiering 2013). In theri article, authors create an overlay over contemporary information technology (IT) development and IT management that shows how privacy design and management activities are related to those activities.

The IT life cycle models COBIT, TOGAF and CMMI are applicable to the V model of software development, while ITIL is mostly concerned with operations of IT systems. Figure 1 below illustrates how the IT management models overlay with the V model.

Figure 1: IT management frameworks and their relationship to the V-model of software development (Rother, Schiering 2013).

Unlike the previous parts of this course which focused on plan-do-check-act cycles, the V model spans from early design to implementation of a system. The PDCA activities from earlier course sections will mainly be carried our in the "operations and maintenance" phase of the IT life cycle (although feeding back information to re-engineering activities). Roter and Schiering place LINDDUN into the requirements engineering and architecture specification phase of the V model. Some may argue that LINDDUN reaches forth into the design phase, however as of now LINDDUN is very little helpful in determining actual design decisions. As shown in Figure 2, privacy patterns are mainly relevant in the design phase, while data protection and privacy impact assessments are carried out during conceptualization, requirements engineering, design and implementation as well as during the testing and cerification phase.

Figure 2: Privacy design and management activities as part of the IT liffe cycle. From (Rother, Schiering 2013).

Risk-driven operational privacy management is then applied to the operations and maintenance phase as well as to the termination of the IT system.

For a closer look at the privacy design and management support in ITIL, COBIT, TOGAF and CMMI, please refer to the article (Rother, Schiering 2013).

References

Saskia Viktoria Rother, Ina Schiering (2013): Privacy in the Life-Cycle of IT Services - An
Investigation of Process Reference Models; In: Privacy and Identity 2013: Privacy and Identity Management for Emerging Services and Technologies pp 102-113; IFIP Advances in Information and Communication Technology book series (IFIP AICT, volume 421) (2013) [link1] [link2]