What is Data Masking?
Data masking is the process of obscuring or masking sensitive data by replacing it with ‘realistic’ but not ‘real’ data. Ideally this data will also be fully functional, preserve referential integrity and not ‘break’ the application.
The goal of data masking is to ensure that NO sensitive information is available outside of an authorized and secured PRODUCTION environment.
It is common practice to refresh a DEV, TEST or UAT environment with PRODUCTION data. As we know non-PRODUCTION environments have little or no security, so if any of the copied data is of a sensitive nature then it is rendered completely exposed and vulnerable to breach.
Masking all sensitive data that resides outside of a secured PRODUCTION environment significantly reduces the risk of data leaks.
Data Masking as a Service (DMaaS)
Data Masking software is very expensive and there if often no need to continually mask the same data, so a lot of money is spent on software that will hardly be used. In addition, data is complicated and masking it requires certain skill sets and experience. Lastly data masking is quite useless if no repository of realistic data is available from which to replace the real data.
Encryptech is the first company in South Africa to offer Data Masking as a Service (DMaaS), where you only pay per database being masked and when you want it masked. Encryptech’s DMaaS affords organizations huge financial benefits by saving them from expensive licensing fees, expensive employee training and the necessity of having a skilled resource available on an infrequent basis.
An addition to having extensive data masking experience, Encryptech also has a large repository of realistic data from which to source replacement data.
Encryptech have a data repository of:
- First names – race and gender specific
- Surname – race specific
- Addresses – for major cities in South Africa including Suburb, Post Code and PO Box numbers.
- Valid SA ID Numbers
- Land line number with appropriate dialling code, Cell numbers, Tax Numbers, Email address, Banking details, Medical Aids etc.
- Business Names & Addresses
Encryptech also has a full repository of British and American PII data and formats.