Guidelines for the Use of Personal Data in System Testing

This is the Guidelines for the Use of Personal Data in System Testing

Description: This recently released guide, which is supported by the UKs Financial Services
This book provides guidelines on the use of personal data in system testing in compliance with the Data Protection Act 1998 (DPA). Organizations have a legal obligation to respect the rights of individuals to confidentiality and privacy, and this applies to the use of personal data in system testing just as it does to any other data.

With new developments in business and information technology personal data is increasingly easy to obtain and there are many new possibilities for its use. Systems’ testing is required to maximize the benefits of technology while reducing the risk of breaches of security and loss or destruction of data. This book shows how compliance with the DPA need not be overly complex or expensive. By effective use of risk assessment techniques an organization can take a realistic view of the dangers while at the same time ensuring they comply with the law.
Contents
1. Personal data in the e-commerce environment
2. Processing under the Data Protection Act 1998
3. The importance of system testing
4. The Information Commissioner’s view
5. Key risks in system testing
6. System testing - purpose or subsidiary function?
7. Alternative test groups
8. Duty of confidentiality
9. Matching and cleansing data
10. Accuracy and limiting the data
11. Retention and disposal
12. Rights of individuals
13. Security - Use of BS 7799 in system testing
14. Physical protection of the system
15. Use of technical measures in the test environment
16. System testing by third parties
17. Financial environments: The use of dummy or test accounts.
18. Disaster recovery
19. International data transfer
20. Appendices - Example forms and blank templates
- Factors to consider in approaching a system testing strategy
- Data Classification table
- Data justification table
- Risk analysis – Identification of key risks and handling strategies

If you use personal data of any sort in system testing, you need to order this book today.

Category: Compliance (incl. Data Protection & SOX): Books and Toolkits