Privacy impact assessments (PIA) are required by the E-Government Act of 2002 for federal agencies to submit to the Office of Management and Budget annually. The assessments evaluate IT systems and how personally identifiable information is collected, stored, shared and managed. The document discusses researching how PIAs are used and whether they provide useful information to privacy advocates, lawmakers and others involved in policymaking. A two to three page white paper will be written analyzing PIAs and their usefulness as a policy tool based on research into laws, best practices and perspectives of different groups.

1. Buy here:
http://theperfecthomework.com/csia-360-case-study-1-ar
e-privacy-impact-assessments-pia-useful-as-a-policy-too
l/
CASE STUDY #1: ARE PRIVACY IMPACT ASSESSMENTS (PIA) USEFUL AS A POLICY
TOOL?
CASE SCENARIO:
A client has asked your cybersecurity consulting firm to provide it with a 2 to 3 page
white paper which discusses the ​usefulness of Privacy Impact Assessments (PIA) as
a policy tool​ . The purpose of this white paper is to inform attendees at an inter-agency
workshop on writing ​Privacy Impact Assessments​ for their IT investments. These
assessments are required by the ​E-Government Act of 2002​ (See
https://www.whitehouse.gov/omb/memoranda_m03-22​) and must be submitted to the
Office of Management and Budget (OMB) each year by agencies as part of their
E-Government Act​ compliance reports. OMB, in turn, forwards a summary of these
reports to Congress as part of the administration’s ​E-Government Act Implementation
Report (see
https://www.whitehouse.gov/​sites/default/​files/omb/​assets/egov_docs/​final_fy14_e-go
v_act_report_02_27_2015.pdf​ ).
RESEARCH:
1. 1. Read / Review the Week 1 readings.
2. 2. Research the requirements in federal law to protect the privacy of
individuals. Here are some sources that you may find useful:
1. a. ​Alternatives Exist for Enhancing Protection of Personally
Identifiable Information​ (GAO-08-536)
http://www.gao.gov/new.items/d08536.pdf
2. b. ​Guide to Protecting the Confidentiality of Personally
Identifiable Information (PII)​ (NIST SP-800-122)
http://csrc.nist.gov/publications/nistpubs/800-122/sp800-122.pdf
3. 3. Research how ​Privacy Impact Assessments​ are used by ​privacy
advocates​ and other members of the public who lobby lawmakers or
otherwise seek to influence public policy. Here are some sources to get
you started:4. Find three or more additional sources which provide
information about best practice recommendations for ensuring the privacy
of information processed by or stored in an organization’s IT systems and
databases. These additional sources can include analyst reports and/or
news stories about recent attacks / threats, data breaches, cybercrime,

2. cyber terrorism, etc. which impacted the privacy of individuals whose
information was stored in federal IT systems and databases.
1. a.
http://www.constitutionproject.org/documents/privacy-advocates-
say-fbi-facial-recognition-system-could-threaten-civil-liberties/
2. b. ​https://epic.org/privacy/surveillance/spotlight/1006/
3. c.
https://www.aclu.org/aclu-opposition-hr-3523-cyber-intelligence-s
haring-and-protection-act-2011
4.
WRITE:
Write a two to three page summary of your research. At a minimum, your summary
must include the following:
1. 1. An introduction or overview of ​privacy​ which provides definitions and
addresses the laws, regulations, and policies which require federal IT
managers to protect the privacy of individuals whose information is
processed or stored in federal IT systems. This introduction should be
suitable for an executive audience.
2. 2. A separate section which addresses the contents of Privacy Impact
Assessments and how they are currently used by the federal government
and members of society.
3. 3. An analysis of whether or not ​privacy impact assessments​ provide
useful information to privacy advocates, lawmakers, and others who
develop or influence privacy policies and laws in the United States.
Federal Officials who participate in the policy making process include:
OMB Staff, White House Staff, Congressional Committees and their staff
members, Members of Congress (Representatives & Senators).
Your white paper should use standard terms and definitions for cybersecurity and
privacy. The following sources are recommended:
● NICCS Glossary ​http://niccs.us-cert.gov/glossary
● Guidelines on Security and Privacy in Public Cloud
Computinghttp://csrc.nist.gov/publications/nistpubs/800-144/SP800-144.pdf
SUBMIT FOR GRADING & DISCUSSION
1. 1. Submit your case study in MS Word format (.docx or .doc file) using the
Case Study #1 Assignment in your assignment folder. (Attach the file.)
2. 2. Post your case study for discussion with your classmates. First, create
a new topic in the Case Study #1 Discussion Forum. Then, paste the
contents of your Case Study #1 document directly into that message. (Do
not attach the file.)

3. 3. 3. Last posting or no posting for discussion will be penalized heavily so it
is in your best interests to post your case study before the assigned due
date.
4. 1. Use standard APA formatting for the MS Word document that you
submit to your assignment folder. Formatting requirements and examples
are found under Course Resources > APA Resources.
5. 2. Use the “Paste from Word” paste option in the LEO editor when posting
your Case Study to the Case Study #1 Discussion forum.
6. 1. You are expected to write grammatically correct English in every
assignment that you submit for grading. Do not turn in any work without
(a) using spell check, (b) using grammar check, (c) verifying that your
punctuation is correct and (d) reviewing your work for correct word usage
and correctly structured sentences and paragraphs. These items are
graded under Professionalism and constitute 20% of the assignment
grade.
7. 2. You are expected to credit your sources using in-text citations and
reference list entries. Both your citations and your reference list entries
must comply with APA 6th edition Style requirements. Failure to credit
your sources will result in penalties as provided for under the university’s
Academic Integrity policy.
FORMATTING INSTRUCTIONS
ADDITIONAL INFORMATION