This paper from Information and Privacy Commissioner of Ontario Ann Cavoukian co-authored with Stuart Shapiro of the MITRE Corporation and R. Jason Cronk of Enterprise Consulting Group offers an introduction as to what privacy engineering entails and looks into how a privacy engineer approaches risks and risk analysis; considers the broad classes of mitigating controls, and examines trade-offs.