Adapting the SQUARE Process for Privacy Requirements Engineering
• SEI Report
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2010-TN-022DOI (Digital Object Identifier)
10.1184/R1/6571826.v1Topic or Tag
Abstract
As software systems become more distributed and complex, maintaining privacy of data and ensuring data integrity remain challenges for software practitioners. Developing such systems not only poses technical challenges but also demands compliance with privacy laws. Engineering precise privacy requirements is an important step in building these software systems. This technical note explores the use of a disciplined approach to identifying privacy requirements, primarily how the Security Quality Requirements Engineering (SQUARE) process, which was developed for security requirements engineering, can be adapted for privacy requirements engineering in software development.
Part of a Collection
Security Quality Requirements Engineering (SQUARE)
Cybersecurity Engineering Research: Security Quality Requirements Engineering (SQUARE) Collection
Cite This SEI Report
Bijwe, A., & Mead, N. (2010, July 1). Adapting the SQUARE Process for Privacy Requirements Engineering. (SEI Report CMU/SEI-2010-TN-022). Retrieved September 12, 2026, from https://doi.org/10.1184/R1/6571826.v1.
@techreport{bijwe_2010,
author={Bijwe, Ashwini and Mead, Nancy},
title={Adapting the SQUARE Process for Privacy Requirements Engineering},
month={Jul},
year={2010},
number={{CMU/SEI-2010-TN-022},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6571826.v1},
url={https://doi.org/10.1184/R1/6571826.v1},
note={Accessed: 2026-Sep-12}
}
Bijwe, Ashwini, and Nancy Mead. "Adapting the SQUARE Process for Privacy Requirements Engineering." (CMU/SEI-2010-TN-022). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 1, 2010. https://doi.org/10.1184/R1/6571826.v1.
A. Bijwe, and N. Mead, "Adapting the SQUARE Process for Privacy Requirements Engineering," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2010-TN-022, 1-Jul-2010 [Online]. Available: https://doi.org/10.1184/R1/6571826.v1. [Accessed: 12-Sep-2026].
Bijwe, Ashwini, and Nancy Mead. "Adapting the SQUARE Process for Privacy Requirements Engineering." (SEI Report CMU/SEI-2010-TN-022). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Jul. 2010. https://doi.org/10.1184/R1/6571826.v1. Accessed 12 Sep. 2026.
Bijwe, Ashwini; & Mead, Nancy. Adapting the SQUARE Process for Privacy Requirements Engineering. CMU/SEI-2010-TN-022. Software Engineering Institute. 2010. DOI: 10.1184/R1/6571826.v1. https://doi.org/10.1184/R1/6571826.v1