Security and Privacy Impact Assessment: Using a Distributed Model to Develop Local Security and Privacy Liaisons

The University of Pennsylvania has implemented a distributed security and privacy program. While striving to bring the disparate parts of the institution into policy compliance and increase security and privacy awareness, we have succeeded in creating a cadre of liaisons to preemptively find and address potential problems without increasing costs.