Chapter 1 — Advanced security decision-making

Lesson map

Lesson 01 published. Map, example, EX001.

flowchart TD
  N0["Learning outcomes"]
  N1["1.1 The practitioner and the firm"]
  N2["1.2 Decisions under uncertainty"]
  N3["1.3 Constraints versus trade-offs"]
  N4["1.4 Recording decisions"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX001"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["1.1 The practitioner and the firm"]
  N2["1.2 Decisions under uncertainty"]
  N3["1.3 Constraints versus trade-offs"]
  N4["1.4 Recording decisions"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX001"]

[Learning outcomes]
    |
    v
[1.1 The practitioner and the firm]
    |
    v
[1.2 Decisions under uncertainty]
    |
    v
[1.3 Constraints versus trade-offs]
    |
    v
[1.4 Recording decisions]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX001]

Learning outcomes

You will (1) frame privacy decisions as choices under uncertainty; (2) separate legal constraints from risk trade-offs; (3) document decisions for accountability.

1.1 The practitioner and the firm

Priscila Andrade is the privacy manager at the fictional Corvina Pay, a payments company with 900 staff serving customers in Brazil and Portugal. She enrols in a two-year postgraduate course at the fictional Ashgrove School of Management, tutored by Dr. Helen Ward. Corvina must comply with the LGPD in Brazil and the GDPR in Portugal. Priscila's daily work involves decisions about fraud models, marketing consent, vendors and data requests, often made quickly and with incomplete information about risks and benefits. Most arrive as urgent product requests.

1.2 Decisions under uncertainty

Dr. Ward asks Priscila to describe a recent decision. The fraud team wanted precise GPS location for every card payment. Priscila did not know how much GPS would improve detection, how customers would react or how regulators would view it. She learns to frame such decisions with options, outcomes, probabilities and values, even if estimates are rough. Writing down the uncertainty makes it possible to reduce it, for instance by testing whether coarser data perform as well before collecting precise location from everyone.

1.3 Constraints versus trade-offs

Priscila separates constraints from trade-offs. Constraints are requirements that cannot be traded away, such as having a lawful basis under GDPR Article 6 or LGPD Article 7, and respecting necessity. Trade-offs are choices among lawful options, such as how much data to collect for fraud prevention. She notes that managers often treat legal requirements as costs to be weighed, which is a category error. Clarifying the difference early prevents wasted debate and focuses discussion on the genuine choices that remain. The 72-hour breach deadline is a constraint; how much location detail to keep is a trade-off.

1.4 Recording decisions

Priscila introduces a decision record at Corvina: the question, options considered, evidence, legal constraints, chosen option, residual risk and owner. She uses it for the GPS decision. Accountability under GDPR Article 5(2) and LGPD Article 6(X) requires demonstrating compliance, and decision records are strong evidence. Dr. Ward notes that records also improve future decisions, because the organisation can look back at what it expected and what actually happened, and learn from the difference. Her template has seven fields: the question, options considered, evidence, legal constraints, chosen option, residual risk and owner, plus a date for checking the expected outcome.

Worked example

Priscila frames the GPS request as a decision under uncertainty, separates lawful-basis constraints from collection trade-offs and introduces a decision record.

Synthetic case. Corvina, Ashgrove and all people are synthetic; GDPR Articles 5(2) and 6 and LGPD Articles 6 and 7 are real.

Errors and limits

Rough probabilities can create false precision; show ranges.

Exercises

• EX001 — Constraint or trade-off. Is having a lawful basis a trade-off or a constraint?
  Show marking criteria

  Rubric: 3 = a constraint that cannot be traded away;; 2 = constraint without reason;; 1 = trade-off;; 0 = none.
• EX002 — Reducing uncertainty. How could Corvina reduce uncertainty about GPS value?
  Show marking criteria

  Rubric: 3 = test whether coarser data perform as well before collecting precise location;; 2 = mentions testing;; 1 = collect anyway;; 0 = none.
• EX003 — Decision record fields. List the fields of Priscila's decision record.
  Show marking criteria

  Rubric: 3 = question, options, evidence, constraints, choice, residual risk, owner;; 2 = most;; 1 = few;; 0 = none.
• EX004 — Learning from records. How do decision records improve future decisions?
  Show marking criteria

  Rubric: 3 = comparing expectations with outcomes teaches the organisation;; 2 = mentions learning;; 1 = compliance only;; 0 = none.
• EX005 — Two laws. Which laws govern Corvina's processing and where?
  Show marking criteria

  Rubric: 3 = LGPD in Brazil, GDPR in Portugal;; 2 = one;; 1 = wrong;; 0 = none.

Synthesis

Chapter 1 frames decisions. Chapter 2 surveys current practice.

Continue studying — chapter 01 of 12

← Course home · Course chapter index · Chapter 02 (draft) →