Secure design, build and management of public realm technology, infrastructure, and data-rich environments for local authorities.
Pages
Page 12 of 19
#8 Designing your connected place to protect its data
Connected places rely on the collection and processing of huge amounts of data. Taking a data-driven approach to governing and operating a connected place can bring significant benefits in terms of efficiency and improvements to the quality of life of citizens.
However, the storage and transportation of data are not without risk; where there is potentially sensitive bulk data there will be threat of attack or accident. Your connected place system design should not cache unnecessary data. These data stores are likely to be less well protected than the primary data store, but can potentially yield high-value or sensitive information to an attacker. Care should be taken to protect data at rest and in transit, with a primary focus on resilience of services and the privacy of the citizen.
You should make sure that you understand:
what data is collected, and the benefits and risk associated with that data
where your data is stored and where it may be accessed (all access should be authenticated, authorised, and logged)
if your data is stored or processed by a vendor or on a third party platform
what data is shared via your public APIs
how your data is protected at rest and in transit (and be able to demonstrate it)
the points at which data may converge or aggregate within your connected place system, and additional risk(s) to confidentiality or privacy that this may pose
You should also understand your responsibilities in the event of a data breach, and have procedures in place to handle such an event. This needs to include managing your data in high trust zones by moving it as far away as possible from the untrusted edge quickly. The Information Commissioners Office (ICO) and the NCSC have issued guidance on data protection that:
