Solution Brief

ACCUTIVE SECURITY’S DATA DISCOVERY MASKING

Capture And Conceal With Confidence

THE BUSINESS CHALLENGE - WHY MASK YOUR DATA?

Enterprises today face the regulatory challenge of ensuring the privacy and security of their customers’ information while still successfully conducting their daily business activities. However, organizations often copy and move sensitive data containing Personally Identifiable Information (PII) and Payment Card Industry (PCI) information from the security of their production environments to less secure testing environments or for third-party use, which can pose security risks. Prior to being copied to these environments, this sensitive data need to be identified and masked, to ensure individual privacy and meet regulatory compliance standards (PCI-DSS, GLBA, OSFI/PIPEDA, HIPAA, FERPA, GDPR). Unlike data encryption, data masking makes data unrecognizable while preserving its format, so it is still usable.

Accutive Security Data Discovery and Accutive Security Data Masking solutions provide the abilityto locate, mask, and move your critical sensitive data, while ensuring the data properties and fields remain intact across any number of sources. After being processed through the masking operation, the data will still look real, but in truth, it will have become fictitious. Additionally, the masked data will also remain consistent throughout all sources. For example, Joe Smith masked as John Doe will always be John Doe in System A, System B, etc. Masking production data for non-production environment uses will reduce the risk of data compromise, while meeting regulatory requirements.

THE BUSINESS VALUE - DATA MASKING BENEFITS

Reduce potential data breaches by mitigating the risk of Disclosing sensitive data that resides in testing, training, Development or third-party environments
Comply with data security and regulatory compliance standards for storing sensitive data, such as PCI-DSS, GLBA, OSFI/PIPDA, HIPAA, FERPA and GDPR
Create fictitious data that retains data field properties and is fully-functional across multiple systems
Reduce the cost of database software licenses in Development and testing environment

HOW ACCUTIVE SECURITY DATA MASKING WORKS

Accutive Security Data Discovery and Data Masking solutions incorporatea robust software platform designed to perform automated discovery of sensitive data. All source tables and field names are searched and mapped during the discovery operation and maintain all field properties of the source data. The output data will remain fully functional, yet the information will no longer be sensitive. For example, a 16-digit credit card in the source data will remain a 16-digit credit card after being masked. Furthermore, that credit card number will be the same every time you mask it, should you need it to be.

PRODUCT FEATURES AND FUNCTIONALITY

Accutive Security Data Discovery and Data Masking is built upon the reliable and scalable Java platform and is optimized for high performance. It is a web-based, Drag-and-drop user interface for rapid and simplified configuration and field mapping. The platform enables consistent, flexible and repeatable enterprise data discovery and masking capabilities.

Perform masking between different source and destination database engines
Automated scan and discovery ofsensitive data
Easily configure how each sensitive data field is masked
Supports cloud environments such as AWS, Azure, etc.
Track and report on all data masking operations
Uses a reference key to consistentlymask values across multiple databases

Save and reuse multiple masking Requirements and configurations
Multiple user authentication options For enhanced security
Automated alerts via email or text
Customize masking operations
Policy configuration to enable field Scanning in support of GDPR and Other compliance regulations

DEPLOYMENT AND BEST PRACTICES

Due to the complexities and challenges surrounding data visualization, there is a growing demand for data masking. In response to our Fortune 500 customers’ needs, Accutive Security continues to evolve its data masking solution. Organizations that implement Accutive Security’s Data Discovery and Data Masking solutions demonstrate to their clients, business partners, and regulatory authorities that they take data protection seriously by proactively reducing the risk of a data breach or violation of security policies and regulatory requirements.

The deployment and management of Accutive Security’s solutions consists of four phases as depicted in the diagram below. This workflow can be customized to match a client’s development lifecycle methodology.

DATA MASKING IMPLEMENTATION METHODOLOGY

DISCOVER

Identify Data Sources and Destinations

Sensitive data discovery

Review Security Procedures

GRC Requirements

EDM Training

DESIGN

Catalog and Classify Data

Data Mapping and Relationships

Establish Data Masking Algorithm

Establish Environment Requirements

Identify and Design Masking Customizations

DEVELOP

Establish Data Source Connections

Create Data Masking Configuration

Develop Customizations

Create Test Cases and Datasets

Deployment Planning

DEPLOY

Setup Configuration Schedules

Implement Backup and Recovery Procedures

Develop Operational Guide

Perform Data Masking

SAMPLE MASKING OPERATORS

First name, last name, addresses - International addresses supported
City, state, county, and zip code concurrently - all coordinated through therandomized zip code
Social security number, credit card number, phone number or any numerical field
Credit cards number - valid numbers that pass the LUHN test
Custom lists of client data which may be randomly selected for the chosen field
Numerical fields that preserve some preceding or trailing digits
Date fields which may be random or selectable within a range; for example, plus Or minus a number of years

ACCUTIVE SECURITY DATA DISCOVERY AND DATA MASKING ALLOWS YOUR ORGANIZATION TO CAPTURE AND CONCEAL DATA WITH CONFIDENCE.

At Accutive Security, we are a trusted leader in Auth + Crypto solutions. Founded in California in 2009 by FinTech engineers and consultants, our expertise is focused on safeguarding essential data and software systems. Partnered with the world’s leading Auth + Crypto companies, we deliver a comprehensive range of services and products to our mutual customers, including data discovery, data masking, key management, PKI management, certificate lifecycle management, hardware security module management, and more.

Our cutting-edge solutions are trusted by globally recognized organizations to protect their most sensitive data, regardless of its location. From cloud infrastructures to data centers, we ensure information remains secure and accessible. With our commitment to security, we empower organizations to confidently navigate their digital transformation and realize their full potential in a digitally connected future. Visit our website to learn more about our security solutions and services at www.accutivesecurity.com/adm-platform/