Data Masking
The Risk
Data are the fuel and proof of an organization’s growth and success. Therefore many times information should be shared with others or processed by others in order to further promote and provide value to the organization. Sharing could take place among different organization departments i.e. production, development, testing and support, and very often information processing and analysis is outsourced.
Although the data residing in the production environment are usually properly safe guarded, the same does not happen as the data are distributed and shared for troubleshooting, development, training or analysis. Furthermore, sensitive data, personally identifiable or business confidential information are leaking through this process, although they are not really required by the data receivers.
Enforcing strict controls among the receivers, who you share data with, is fighting the purpose of sharing the data and is, most of the times, impossible. Therefore the organization should be able to provide the data required, replacing personal identifiable or business confidential information, with realistic data, while maintaining referential integrity.
Latest data security regulations take into consideration the process of sharing data, as it was proven that several sensitive data leaks happened because of the loose controls during this process.
Protecting your Organization
Odyssey will work closely with your organization towards providing the processes and technology required to integrate Data Masking (Obfuscation, De-identification etc.) in your data-sharing path.
We will help you identify which data to mask and where these data reside in your database environment.
Furthermore, we will help you decide on the proper masking method, which will achieve de-identification, while maintaining meaningful and consistent analysis results (e.g. with respect to location, age etc.).
The proposed solutions can maintain referential integrity between your data and can be applied either on-the-fly or in-situ, depending on your needs.
|
|
"The organization should be able to provide data required, replacing personal identifiable or business confidential information, with realistic data, while maintaining referential integrity". |
Doing it right: Our Data Masking Solutions key Features and Benefits
Our Data Masking solutions are largely characterized by the following key features and benefits:
|
Key Features
|
Benefits
|
|
Greatly reduces your organizations’ exposure to data theft and data loss
|
Reduced complexity on data protection outside of the production environment
Enforces “need to know access”
|
|
Securely share business information and data
|
Greatly enhances business development and growth
|
|
Reduces restrictions on data use
|
Enabled off-site and cross-border data analysis and business intelligence feedback
|
|
Promotes and proves compliance with strict data protection regulations
|
Improved client, employee and associate confidence and higher sense of security
|
|
Cross platform, ease of use
|
More resources focus on business development, thus increased DBA productivity
|
|
Detailed and summary reports
|
Addresses regulatory requirements with the use of both detailed as well as summary reports |
|
A central management console allows for the easy and timely management of the system
|
Centralized administration, reduces overhead and management costs |
|
Detailed and summary reports over the Data Masking process
|
Addresses regulatory requirements with the use of both detailed as well as summary reports created during the Data Masking process |
Remaining Secure – Support tailored to your needs
We very well understand that to remain effective, a security deployment requires constant monitoring, fine-tuning, updating and maintenance. These requirements may prove a burden your organization may not be poised to undertake. We have, therefore, structured our post-deployment services so that you may have the level of support you need, in order to achieve maximum return on your investment, with the least of worries.
Our suite of post-deployment services range from simple Maintenance and Support, to full-fledged Managed Security & Outsourcing Services.
This solution comprises part of the “Design & Implement” phase of our Information Security Continuum (D&I).