On Tue, Jun 15, 2010 at 10:28 AM, George Henke <[email protected]> wrote: > There are over 5000 indexes to Tables in my clients production DB2 > system which is a relatively small by industry standards. > > But I must admit, I can't imagine how, in a mainframe environment, sensitive > data could be scrambled without losing "referential integrity" or how anyone > could cost effectively reproduce this data from scratch and then have any > confidence in the test results. >
I've seen in-house developed tools at various shops to create positive and negative test cases. The tools typically use some type of template. The data entered into the template is then run through a process to generate the actual test data. This is good for low-volume unit tests. The tools are complex enough that they have their own support staff to keep current with the changing nature of the transaction data and related reference databases. I've seen other cases where production data is extracted to get a 'spread' of data based on certain key fields. Then any personally identifiable information is scrambled to make it unrelated to the original source. The scrambling is on a field by field basis (again all custom tools) so that referential integrity is maintained. I've never seen high-volume testing done with anything other than production data. In this case, highly restricted RACF rules (access and logging) were used to keep control. > Of course I suppose, one could argue that the production data is already > scrambled. :-) > > On Tue, Jun 15, 2010 at 12:17 PM, Staller, Allan > <[email protected]>wrote: > >> Yes to both, but no details available. Check the Payment Card Industry >> (PCI) materials. >> >> <snip> >> 1) Does anyone know of developers being prevented from using production >> data >> and being required to create their own test data completely from >> scratch? >> >> 2) Does anyone know of a software tool that will scramble production >> data >> like SSNs while maintaining "referential integrity" ( DB2, IMS, etc) to >> prevent developers from having access to sensitive production data? >> </snip> >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [email protected] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> > > > > -- > George Henke > (C) 845 401 5614 > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
