Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Privacy engineering technologyAdvanced

Privacy-Enhancing Technologies

Privacy-enhancing technologies reduce exposure or enable useful processing with less disclosure, linkage, or centralized access to personal data.

What it means

Examples include differential privacy, secure multiparty computation, homomorphic encryption, trusted execution environments, federated approaches, and strong de-identification methods.

Why it matters

PETs can support valuable analysis while reducing privacy risk, but their guarantees depend on threat models, implementation, parameters, and surrounding governance.

Practical focus

  • Start with the privacy objective and threat model
  • Understand the guarantee and failure conditions
  • Test utility and privacy tradeoffs
  • Protect metadata, keys, and operational workflows around the technology

Common mistakes

  • Selecting a PET because it is fashionable
  • Assuming cryptography solves governance problems
  • Ignoring repeated-query or linkage risk
  • Publishing claims stronger than the implementation supports

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

ISACA CDPSEISC2 CISSP

Authoritative sources