Draw a DFM diagram and annotate it using "information" and "usage" types based on the given description and For the actions (in the DFM diagram) that may cause one or more breach of "Privacy Requirements", complete the attached Privacy Risk Assessment.xls

Several co-workers of yours have recently had personal belongings stolen from the workplace, and the company is planning to install high-resolution security cameras to capture footage to make the workplace secure. The company prepared a employee consent form for this purpose. The form asked the employees to provide the names of the friends they hang out with, and sign the form agreeing to the installation of the cameras. All employees completed that form. The forms are stored in a cabinet for an unspecified period. The video footage from the cameras is archived in the amazon cloud as long as the company wishes to retain it. Security experts from a third party company ABC Soft, and your office manager have access to that cloud account. ABC Soft uses facial recognition technology to help identify the thieves from the archived footage whenever an incident happens. An incident should be reported within three days of its occurrence for it to be investigated. Since the footage is archived anyway, office manager decided to use them to track various measures of employee attendance and performance.