Privacy Risk Assessment Case Studies in Support of SQUARE

• SEI Report
In this report, the authors describe enhancements to the SQUARE method for addressing privacy requirements.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2009-SR-017
DOI (Digital Object Identifier)
10.1184/R1/6582215.v1

Abstract

This report contributes to further development of the Security Quality Requirements Engineering (SQUARE) method to address privacy. Risk assessment is Step 4 in the standard SQUARE process. This report examines privacy definitions, privacy regulations, and risk assessment techniques for privacy. The risk assessment techniques are classified using a standard method, and promising techniques are applied to two case studies. The case study results are provided along with future plans for SQUARE for Privacy.

Cite This SEI Report

Mead, N., Panusuwan, V., & Batlagundu, P. (2009, July 1). Privacy Risk Assessment Case Studies in Support of SQUARE. (SEI Report CMU/SEI-2009-SR-017). Retrieved October 17, 2026, from https://doi.org/10.1184/R1/6582215.v1.

@techreport{mead_2009,
author={Mead, Nancy and Panusuwan, Varokas and Batlagundu, Prashanth},
title={Privacy Risk Assessment Case Studies in Support of SQUARE},
month={Jul},
year={2009},
number={{CMU/SEI-2009-SR-017},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6582215.v1},
url={https://doi.org/10.1184/R1/6582215.v1},
note={Accessed: 2026-Oct-17}
}

Mead, Nancy, Varokas Panusuwan, and Prashanth Batlagundu. "Privacy Risk Assessment Case Studies in Support of SQUARE." (CMU/SEI-2009-SR-017). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 1, 2009. https://doi.org/10.1184/R1/6582215.v1.

N. Mead, V. Panusuwan, and P. Batlagundu, "Privacy Risk Assessment Case Studies in Support of SQUARE," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2009-SR-017, 1-Jul-2009 [Online]. Available: https://doi.org/10.1184/R1/6582215.v1. [Accessed: 17-Oct-2026].

Mead, Nancy, Varokas Panusuwan, and Prashanth Batlagundu. "Privacy Risk Assessment Case Studies in Support of SQUARE." (SEI Report CMU/SEI-2009-SR-017). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Jul. 2009. https://doi.org/10.1184/R1/6582215.v1. Accessed 17 Oct. 2026.

Mead, Nancy; Panusuwan, Varokas; & Batlagundu, Prashanth. Privacy Risk Assessment Case Studies in Support of SQUARE. CMU/SEI-2009-SR-017. Software Engineering Institute. 2009. DOI: 10.1184/R1/6582215.v1. https://doi.org/10.1184/R1/6582215.v1