Supporting Document: Privacy and Security Audit Report Template
Title
Smart Home Privacy, Security and Supply Chain Audit
Student name:
System audited:
1. System overview
Describe the smart home system in 4-6 sentences.
| Component | Role | Data or control involved | Evidence or note |
|---|---|---|---|
| App/interface | |||
| Controller/device | |||
| Network/Wi-Fi/MQTT | |||
| Light/front door/garage door | |||
| Sensors/extension circuits | |||
| External code/services/components |
2. Users and stakeholders
| User/stakeholder | What they need | What could go wrong for them? |
|---|---|---|
| Home user | ||
| Guest/visitor | ||
| Builder/developer | ||
| School/teacher, if relevant |
3. Data and digital footprint map
| Data item | Where it starts | Where it goes | Why it is used | Privacy concern |
|---|---|---|---|---|
| Device state | ||||
| App command | ||||
| Network address/device identity | ||||
| User action/log | ||||
| Other |
4. APP critique
Apply at least four APP ideas.
| APP idea | How it applies to this system | Strength or concern | Improvement |
|---|---|---|---|
| Transparency | |||
| Collection limitation | |||
| Use/disclosure | |||
| Security of personal information | |||
| Access/correction |
5. Risk matrix
| Risk ID | Risk | Type | Likelihood | Impact | Priority | Evidence/reason |
|---|---|---|---|---|---|---|
| R1 | user/security/supply chain | low/medium/high | low/medium/high | low/medium/high | ||
| R2 | user/security/supply chain | low/medium/high | low/medium/high | low/medium/high | ||
| R3 | user/security/supply chain | low/medium/high | low/medium/high | low/medium/high | ||
| R4 | user/security/supply chain | low/medium/high | low/medium/high | low/medium/high | ||
| R5 | user/security/supply chain | low/medium/high | low/medium/high | low/medium/high |
6. Recommendations
| Recommendation | Risk reduced | Quick fix or longer-term? | Why this helps |
|---|---|---|---|
7. Conclusion
Is the system ready, partly ready or not ready for real users?
Judgement:
Evidence:
Highest priority improvement:
8. Sources
List at least two reputable sources.