<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Jyri Rajamäki</style></author><author><style face="normal" font="default" size="100%">Ilkka Tikanmäki</style></author><author><style face="normal" font="default" size="100%">Jari Räsänen</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">CISE as a Tool for Sharing Sensitive Cyber Information in Maritime Domain</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">Cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">early warning</style></keyword><keyword><style  face="normal" font="default" size="100%">ECHO project</style></keyword><keyword><style  face="normal" font="default" size="100%">information sharing</style></keyword><keyword><style  face="normal" font="default" size="100%">maritime surveillance</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2019</style></year></dates><volume><style face="normal" font="default" size="100%">43</style></volume><pages><style face="normal" font="default" size="100%">215-235</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The ECHO project aims at organizing and coordinating an approach to strengthen proactive cyber security in the European Union through effective and efficient multi-sector collaboration. One important tool for this aim is the ECHO Early Warning System (E-EWS). The development of the E-EWS will be rooted in a comprehensive review of information sharing and trust models from within the cyber domain, as well as models from other domains. In 2009, the Commission adopted a Communication Towards the integration of maritime surveillance in the EU: “A common information sharing environment for the EU maritime domain (CISE),” setting out guiding principles towards its establishment. The aim of the COM(2010)584 final was to generate a situational awareness of activities at sea and impact overall maritime safety and security. As a outcome of COM(2010)584 final, the EUCISE2020 project has developed a test-bed for maritime information sharing. This case study analyses information sharing models in the maritime domain, the EUCISE2020 test bed and the CISE itself as an alternative for cyber information sharing system. The maritime sector represents a suitable research case because it is already digitized in many aspects. </style></abstract><issue><style face="normal" font="default" size="100%">2</style></issue><section><style face="normal" font="default" size="100%">215</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Jyri Rajamäki</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Design Science Research towards Privacy by Design in Maritime Surveillance ICT Systems</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">GDPR Directive</style></keyword><keyword><style  face="normal" font="default" size="100%">impact assessment</style></keyword><keyword><style  face="normal" font="default" size="100%">maritime surveillance</style></keyword><keyword><style  face="normal" font="default" size="100%">open source intelligence</style></keyword><keyword><style  face="normal" font="default" size="100%">OSINT</style></keyword><keyword><style  face="normal" font="default" size="100%">privacy</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2019</style></year></dates><volume><style face="normal" font="default" size="100%">43</style></volume><pages><style face="normal" font="default" size="100%">196-214</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Maritime surveillance is essential for creating maritime awareness. When open source intelligence (OSINT) is becoming a part of it, privacy in surveillance will be a special concern. However, processing of personal data in surveillance is regulated by the General Data Protection Regulation (GDPR) and/or by the Directive 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data. In both of these regulations, Privacy by Design (PbD) approach is mandatory. GDPR encourages applying a Data Protection Impact Assessment (DPIA) to identify and minimize data protection risks as the initial step of any new project. This design science research shows how PbD and DPIA are adapted in the MARISA project and tries to be a step towards new meta-artifacts and useful methods for the design and validation of privacy requirements engineering approaches into maritime surveillance ICT systems.</style></abstract><issue><style face="normal" font="default" size="100%">2</style></issue><section><style face="normal" font="default" size="100%">196</style></section></record></records></xml>