While you can make a customized versions for EACH and EVERY type of ACSII/EBCID/VSAM/FLAT file, DB2/IMS/ACESSS etc Database, XML, Excel, etc files (remembering that PII (personnel identifiable information) can be stored in a number of different places), you would also have to maintain all the different process as the application(s) enviroment(s) moves forward.
One must verify that any in house process developed is secure from the very programmers who develop the masking functions in the first place. You would not want a 'back door' created by the very people that are creating your customized data masking process in the first place. You need to make sure that any masking functions you do on the mainframe, must also be created on the mid tier environments. As most applications need consistence in the enterprise not just in one small area. (for User testing, QA etc.). Next you need to create the ability to produce an audit trail, so that internal/EDP/External auditors can verify that data masking has been done. I can go on, but you get my drift of the matter. It is not so easy to create a data masking process that is maintainable, auditable, consistent etc with the goals of the organization If you have any question feel free in contacting me Robert Galambos CIPP/C CIPP/IT Compuware Senior Technical Specialist IBM Certified Database Associate IBM Certified DB2 9 for z/OS Database Administration Certified Information Privacy Professional/Canada Certified Information Privacy Professional/Information Technology [email protected] Tel: +1 905 886 7000 Toll Free: +1 800 263 7189 Fax: +1 905 886 7023 Quebec: +1 877-281-1888 Le contenu de ce courriel s'adresse au destinataire seulement. Il contient de l'information pouvant être confidentielle. Vous ne devez ni le copier ni l'utiliser ni le divulguer à qui que ce soit à moins que vous soyez le destinataire ou une personne désignée autorisée. Si vous le receviez par erreur, veuillez nous aviser immédiatement et le détruire. The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it. "Service in every product... Les renseignements contenus dans le présent message électronique sont confidentiels et concernent exclusivement le(s) destinataire(s) désigné(s). Il est strictement interdit de distribuer ou de copier ce message. Si vous avez reçu ce message par erreur, veuillez répondre par courriel à l'expéditeur et effacer ou détruire toutes les copies du présent message. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Hal Merritt Sent: April 7, 2009 11:34 AM To: [email protected] Subject: Re: Data Masking How about good old IEBGENER and/or DFSORT? Most think of IEBGENER as a copy program, but it's primary mission is (or was) really a test data generator. DFSORT (or equivalent) has some awesome capabilities. Wheels invented long ago, stable, and the price is right. That said, record layouts are often pretty complicated things, and a simple custom program in the language of your choice may be cost effective. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Ward, Mike S Sent: Tuesday, April 07, 2009 9:58 AM To: [email protected] Subject: Data Masking Hello all, I was wondering if anyone has a product comparison matrix for data masking product? We are starting to look at quick ways to mask production data while copying it to test files for testing. Any type of questionnaire or comparison matrix would be helpful. I would rather not try and reinvent the wheel, plus I don't know a lot about the Masking Products. Any help welcome. NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
