This document is published by the Data Privacy Vocabularies and Controls Community Group (DPVCG) as a deliverable and report of its work in creating and maintaining the Data Privacy Vocabulary (DPV).

Classes

3 Likelihood Levels | 3 Risk Levels | 3 Severity Levels | 5 Likelihood Levels | 5 Risk Levels | 5 Severity Levels | 7 Likelihood Levels | 7 Risk Levels | 7 Severity Levels | Extremely High Likelihood | Extremely High Risk | Extremely High Severity | Extremely Low Likelihood | Extremely Low Risk | Extremely Low Severity | High Likelihood | High Risk | High Severity | Low Likelihood | Low Risk | Low Severity | Moderate Likelihood | Moderate Risk | Moderate Severity | Very High Likelihood | Very High Risk | Very High Severity | Very Low Likelihood | Very Low Risk | Very Low Severity |

Classes

Avoid Source | Change Consequence | Change Impact | Control Consequence | Control Monitors | Control Risk Source | Halt Source | Monitor Consequence | Monitor Impact | Monitor Risk | Monitor Risk Control | Monitor Risk Source | Monitor Vulnerabilities | Reduce Likelihood | Reduce Severity | Remove Consequence | Remove Impact | Remove Source | Share Risk |

Classes

Abusive Content Utilisation | Attack on Private Life | Authorisation Failure | Blackmail | Brute Force Authorisations | Business disruption | Business impact | Business Performance Impairment | Child Violence | Citizens impact | Coercion | Compliance impact | Compromise Account | Compromise Account Credentials | Compromise Account Security | Confidentiality Breach | Consequence for Data Subject | Consequence on Data Security | Copyright Violation | Corruption of Data | Cost of Acquisition | Cost of Backup | Cost of Configuration | Cost of Installation | Cost of Judicial Penalties | Cost of Judicial Proceedings | Cost of Operation Interruption | Cost of Suspended Operations | Cryptojacking | Cyber Spying | Cyber Stalking | Damage by Third Party | Danger to Customers | Danger to Personnel | Data Breach | Denial of Service Attack (DoS) | Detriment to Recovery | Discrimination | Distributed Denial of Service Attack (DDoS) | Eavesdropping | Economic Disadvantage | Environmental Safety Endangerment | Equipment Failure | Equipment Malfunction | Errornous System Use | Extorsion | Financial Equipment Costs | Financial Investigation Costs | Financial Loss | Financial Personnel Costs | Financial Repair Costs | Fraud | Government Crisis | Harmful Spech | Health and life impact | Human Errors | Identity Dispute | Identity Fraud | Identity Theft | Illegal Processing of Data | Impact on Data Subject | Impact to Rights | Increase Internal Cost | Industrial Crisis | Injury | Interception of Communications | Internal Operation Disruption | Known Vulnerability Exploited | Law Enforcement Adverse Effects | Limitation of Rights | Loss of Assets | Loss of Competitive Advantage | Loss of Control over Data | Loss of Credibility | Loss of Customer Confidence | Loss of Customers | Loss of Data | Loss of Funds | Loss of Goods | Loss of Goodwill | Loss of Negotiating Capacity | Loss of Opportunity | Loss of Proprietary Information | Loss of Reputation | Loss of Resources | Loss of Suppliers | Loss of Technological Advantage | Loss of Trust | Malicious Code Attack | Malware Attack | MisinformationDisinformation | Misuse of Breached Information | Organisation Disruption | Personal Safety Endangerment | Personnel Absence | Phishing Scam | Physical Assault | Physical Spying | Physical Stalking | Prevent Exercising of Rights | Privacy impact | Psychological Harm | Public Order Breach | RansomwareAttack | Remote Spying | Replacement Costs | Reputation and trust impact | Retrieval of Deleted Data | Retrieval of Discarded Equipment | Sabotage | Scam | Security Breach | Service Interruption | Sexual Violence | Social Disadvantage | Spam | Spoofing | Spying | Stalking | System Failure | System Intrusion | System Malfunction | Terrorism | Theft | Theft of Equipment | Theft of Media | Third Party Operation Disruption | Unauthorised Access to Premises | Unauthorised Code Access | Unauthorised Code Disclosure | Unauthorised Code Modification | Unauthorised Data Access | Unauthorised Data Disclosure | Unauthorised Data Modification | Unauthorised Impersonation | Unauthorised Information Disclosure | Unauthorised Re-Identification | Unauthorised Resource Use | Unauthorised System Access | Unauthorised System Modification | Unknown Vulnerability Exploited | Unwanted Code Deletion | Unwanted Data Deletion | Unwanted Disclosure of Data | Vandalism | Violation of Code of Conduct | Violation of Contractual Obligations | Violation of Ethical Code | Violation of Rights | Violation of Regulatory Obligations | Violation of Statutory Obligations | Vulnerability Created | Vulnerability Exploited |

Classes

ALARA | ALARP | Bayesian Analysis | Bayesian Networks | Bow Tie Analysis | Brainstorming | Business Impact Analysis | Causal Mapping | Cause-Consequence Analysis | Checklists | Cindynic Approach | Classifications | Cost/benefit Analysis | Cross Impact Analysis | Conditional Value at Risk (CVaR) | Decision Tree Analysis | Delphi Technique | Data Protection Impact Assessment (DPIA) | Event Tree Analysis | Fault Tree Analysis | Ishikawa (Fishbone) | Failure Modes And Effects Analysis (FMEA) | Failure Modes And Effects And Criticality Analysis (FMECA) | F-N Diagrams | Game Theory | Hazard Analysis And Critical Control Points (HACCP) | Hazard And Operability Studies (HAZOP) | Human Reliability Analysis | Influence Diagrams | Interviews | Layer Protection Analysis (LOPA) | Markov Analysis | Multi-criteria Analysis (MCA) | Monte Carlo Simulation | Nominal Group Technique | Pareto Charts | Privacy Impact Analysis (PIA) | Qualitative Risk Assessment Technique | Quantitative Risk Assessment Technique | Reliability Centred Maintenance | Risk Assessment Technique | Risk Indices | Risk Matrix | Risk Registers | Scenario Analysis | S-curves | SFAIRP | Surveys | Structured "What If?" (SWIFT) | Taxonomies | Toxicological Risk Assessment | Value At Risk (VaR) |