{"id":10671,"date":"2022-01-20T11:56:13","date_gmt":"2022-01-20T10:56:13","guid":{"rendered":"https:\/\/www.dp-institute.eu\/why-threat-modeling-is-important-for-dpos\/"},"modified":"2023-11-08T10:45:39","modified_gmt":"2023-11-08T09:45:39","slug":"why-threat-modeling-is-important-for-dpos","status":"publish","type":"post","link":"https:\/\/www.dp-institute.eu\/en\/why-threat-modeling-is-important-for-dpos\/","title":{"rendered":"Why Threat Modeling is important for DPOs"},"content":{"rendered":"<h5><strong>One of the important responsibilities of a DPO is to assure that a DPIA is performed for new processing or systems that include personal data.<\/strong><\/h5>\n<p>A Data Protection Impact Assessment (DPIA) is a process to help you identify and minimize the data protection risks of a project.<\/p>\n<p>In our <a href=\"https:\/\/www.dp-institute.eu\/nl\/opleidingen\/data-protection-risk-management\/\" target=\"_blank\" rel=\"noopener\">DPIA &amp; DTIA training<\/a> you already learn that a DPIA typically includes steps like:<\/p>\n<ul>\n<li>describe the nature, scope, context and purposes of the processing;<\/li>\n<li>assess necessity, proportionality and compliance measures;<\/li>\n<li>identify and assess risks to individuals; and<\/li>\n<li>identify any additional measures to mitigate those risks.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>This not only involves the privacy risks, but also cybersecurity risks for your project or system.<\/p>\n<p>Understanding and managing cybersecurity risks for systems can be a daunting task. Especially if you do not have a lot of experience in the cyber security field.<\/p>\n<h5>That is where Threat Modeling as a technique will help you. Threat Modeling is a way to analyze the risk inherent to a system\u2019s design. Originating from application\u00a0security circles, the technique has been found to be effective in many circumstances for many types of systems. The Threat Modeling process is done in two phases, split up in two workshops: data modeling and threat modeling.<\/h5>\n<p>These threat modeling steps will help you create better DPIAs and support the important aspect of building in Privacy by Design.<\/p>\n<p>With DPI we developed a two-month hybrid learning journey for threat modeling practitioners. This <a href=\"https:\/\/www.dp-institute.eu\/nl\/opleiding\/threat-modeling-practitioner\/\" target=\"_blank\" rel=\"noopener\">hybrid online training<\/a> gives you the tools you need to become a threat modeling practitioner, teaching you how to threat model and build in security as an integral aspect of your secure development practice. This training is based on Toreon\u2019s international rewarded <a href=\"https:\/\/www.toreon.com\/threat-modeling-online\/\" target=\"_blank\" rel=\"noopener nofollow\">whiteboard hacking training<\/a>\u00a0that was released in 2016. It\u2019s a course that blends self-paced digital work with action-packed, hands-on live labs run by our seasoned threat modeling experts.<\/p>\n<h5>You will become a better DPO when you add\u00a0<a href=\"https:\/\/www.dp-institute.eu\/nl\/opleiding\/threat-modeling-practitioner\/\" target=\"_blank\" rel=\"noopener\">threat modeling\u00a0<\/a>as technique in your toolbelt.<\/h5>\n","protected":false},"excerpt":{"rendered":"<p>One of the important responsibilities of a DPO is to assure that a DPIA is performed for new processing or systems that include personal data. A Data Protection Impact Assessment (DPIA) is a process to help you identify and minimize the data protection risks of a project. In our DPIA &amp; DTIA training you already [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":10664,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[30],"tags":[],"class_list":["post-10671","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dpo"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/posts\/10671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/comments?post=10671"}],"version-history":[{"count":4,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/posts\/10671\/revisions"}],"predecessor-version":[{"id":13562,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/posts\/10671\/revisions\/13562"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/media\/10664"}],"wp:attachment":[{"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/media?parent=10671"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/categories?post=10671"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dp-institute.eu\/en\/wp-json\/wp\/v2\/tags?post=10671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}