Security and Privacy by Design Checklist Form
Use this checklist to review security and privacy considerations throughout a project’s design, development, and release.
Project Context and Data
Project scope and ownership
*
Service or feature in scope
Responsible owner identified
Relevant stakeholders identified
Intended purpose documented
Data inventory and minimization
*
Data collected or generated identified
Necessity of each data item confirmed
Unnecessary data collection avoided
Data sources and flows documented
Privacy and Data Lifecycle
Privacy safeguards
*
Provide clear privacy information
Limit data use to documented purposes
Apply privacy-protective defaults
Consider de-identification or aggregation
Data lifecycle controls
*
Define retention periods
Securely delete data when no longer needed
Document data sharing and recipients
Provide processes for correcting or removing data where applicable
Access and Secure Development
Identity and access controls
Restrict access by role and need-to-know
Use strong authentication appropriate to the system
Review access periodically
Promptly remove access when no longer needed
Secure design and development
Use secure configuration defaults
Protect secrets and credentials
Validate inputs and safely handle errors
Review relevant third-party components
Verification and Incident Readiness
Security and privacy verification
*
Perform threat modeling or equivalent risk review
Test security controls
Check privacy impacts
Document findings and remediation
Monitoring and incident response
*
Define monitoring for relevant risks
Establish an incident reporting and response process
Identify responsible responders
Prepare notification and recovery procedures
Governance and Release Review
Documentation and accountability
*
Maintain current security and privacy documentation
Record decisions and accepted risks
Define escalation paths
Identify owners for ongoing controls
Release and ongoing review
*
Confirm critical findings are addressed before release
Set a schedule for reassessment
Review changes that may affect data or risk
Track outstanding actions to completion
Submit
Should be Empty: