Search

The success of the project depends partly on the internal management of the risks, by anticipating, understanding and deciding whether or not to introduce mitigation measures. This process involves communication and consulting with stakeholders as well as monitoring and reviewing the risks and factors modifying the risks. This live document serves as a guide to risk management within the context of the ASTEP project and includes the inputs of the risk analysis, which have been identified from the kick-off of the project to the present moment (M24). This analysis will be reviewed and updated periodically along the project development. One of the main risks, which is related to the risk management exercise, is that all partners follow the same path when using risk management terminology, so a glossary is included within the document. The risk management must be integrated in the project management process and also the internal and external rules, so it is important to analyse the already built framework. Although part of this framework was analysed in previous deliverables, some details that directly influence the risk management have been introduced again. The methodology proposed for the risk management is based on the ISO-31000, and it has been adapted to the consortium objectives and characteristics. The different stages, the relationship between these stages, the expected information and the ownership of the different tasks are described in the corresponding sections. Communication, consultation, monitoring and review are common activities for all the risk management stages and they have also been integrated within the procedures already established for the day-to-day working within the consortium. The methodology includes not only the monitor and assessment of risks as isolated entities but also the interaction among them, i.e. considering positive or negative effects that the combination of some risk can introduce. A register of the identified risks and the information related to the risk analysis and evaluation is created, which serves as the input for making decisions. A tool is generated to aid in the generation of this register, in which, part of the information is selected through drop down lists and the evaluation is automatically done. This register is accessible by all the partners and continuously updated by the risk owners and the Management Support Team. Some new risks, additional to those described in the Grant Agreement, have been identified and added to the register. All risks have been analysed in depth and evaluated. The corresponding relevant information has also been included in the register.

The goal of this deliverable is to document ASTEP’s procedures on data and ethical management. It is identified as D1.3 and entitled “Data and ethical management” and it is the result of activities performed in WP1 and specifically under Task 1.5 “Data and Ethical Management”. This document provides the reader with the initial report of ASTEP project activities around data and ethics and its implementation within the consortium. Its key purpose is to create awareness about ethics and data management issues inside the consortium and to create a mindset shared among partners to prevent potential risks by applying a set of common methods and procedures for the project research process. It gives a recap of the project intention and concept, as well as its objectives, in order to determine the data managed in each Work Package, which is also presented, the flow data, the expected results and the management approach. In the different sections, the roles and responsibilities are presented, as well as the methodology and the data collection and materialisation activities. It is also stated that all data used in the project will be publicly available and will be freely used for the purposes of the project, and requirement to fulfil the FAIR approach are presented. The procedures and guidelines for dissemination and intellectual properties rights issues are also explained and provided. Last sections are devoted to Global Data Protection Policy compliance, showing the importance of the technical and organizational implemented measures, depersonalisation methods of personal data and the ethical data management. Ethical issues in ASTEP project are then analysed and presented, highlighting the tasks in which the issues can arise. Finally, information on informed consent procedures, privacy policy and data security are provided. This document an update to the first version of the periodical report D1.3 ‘Data and ethical management’. There will be another updated version of this document by M48 (April 2024).

This document serves as a guide to risk management within the context of the ASTEP project and includes the first inputs of the risk analysis, which have been identified from the kick-off of the project to the present moment (M6). This analysis will be reviewed and updated periodically along the project development.

The goal of this document is to document ASTEP’s procedures on data and ethical management, providingthe reader with the initial report of ASTEP project activities around data and ethics and its implementation within the consortium.

This report focuses on generating a handbook that covers the structure of the consortium and procedures for the monitoring of the technical progress and the resources, as well as for the management of the risks and quality.

The chapter presents an overview of the eight that are part of the European IoT Security and Privacy Projects initiative (IoT-ESP) addressing advanced concepts for end-to-end security in highly distributed, heterogeneous and dynamic IoT environments. The approaches presented are holistic and include identification and authentication, data protection and prevention against cyber-attacks at the device and system levels. The projects present architectures, concepts, methods and tools for open IoT platforms integrating evolving sensing, actuating, energy harvesting, networking and interface technologies. Platforms should provide connectivity and intelligence, actuation and control features, linkage to modular and ad-hoc cloud services, The IoT platforms used are compatible with existing international developments addressing object identity management, discovery services, virtualisation of objects, devices and infrastructures and trusted IoT approaches.