Ensuring Compliance with Data Privacy Directives using Virtual Databases

Transcription

1 Ensuring Compliance with Data Privacy Directives using Virtual Databases June 2017 Steve Karam, Director of Customer Education and Experience at Delphix

2 Agenda Ensure compliance to disparate data privacy directives Develop catalogs of custom datasets for targeted distribution Scale an auditable process while reducing operational burden 2017 Delphix Corporation 2

3 The Importance of Data Sharing Sharing data is critical to creating new and improving existing programs and digital services Benefits Simpler and more usable services More efficient use of resources Better decision-making Improved well-being and outcomes I believe the creation of the Government Digital Service is one of the great unsung triumphs of the last Parliament. David Cameron 2017 Delphix Corporation 3

4 Example: State of California Department of Education Users Alumni Outreach Budget Office Analytics Data Sources Uses Data Privacy Laws Student Information Attendance Data Student Progress Data Standardized Test Scores Eligibility Data Academic Performance Index Adequate Yearly Progress Graduation Rates English Language Development Tests School Accountability Report Cards Family Educational Rights and Privacy Act (FERPA) Protection of Pupil Rights Amendment (PPRA) Children s Online Privacy Protection Act (COPPA) California Public Records Act (PRA) Student Online Personal Information Act

5 Finding the Balance 54% of adults said they believed the public sector kept their personal information more secure (Citrix) 41% of respondents said the public sector is being too cautious about sharing data (KPMG) 2017 Delphix Corporation 5

6 Challenges With Data Sharing Meeting strict data privacy laws Collecting and synchronizing data across disparate systems Accessing data in a timely manner to meet directives Making decisions using low-quality data Managing troves of personal information Barriers to Creating & Improving Digital Services Providing easy, transparent data access (e.g. mobile devices) 2017 Delphix Corporation 6

7 Who Owns the Data? How do you keep citizen data safe and build confidence? How do you broker the flow of information between government agencies and departments? How do you promote information sharing to enable digital in a simple and transparent manner? 2017 Delphix Corporation 7

8 A Modern Data Platform Enables data to be delivered to every stakeholder at the speed, simplicity, and security required to meet development, testing, and analytics demands Delphix Corporation 8

9 A Modern Data Platform Instantly move data Automated processes Self service Secure and governed data 2017 Delphix Corporation 9

10 Collect and synchronize data across departments and systems Student Data 10:27:36 A.M. 1:30:20 P.M. 5:07:15 P.M. DMV Data Court Data Data Platform Data collected across government agencies and systems Data stored and synchronized in a central location High-quality data quickly and easily distributed for use

11 Mask Once, Branch Many, Reset Anytime Departments 10:27 A.M. 1:30 P.M. 5:07 P.M. Embedded Native Masking Third Parties Data Source (e.g. Oracle, SQL Server, DB2) Data Platform Cloud 4 Secure data with masking before it is distributed downstream

12 Maintain Referential Integrity Unmasked Masked Unmasked Masked Claimant Table Claimant Table Employee Table Employee Table ID First_Name ID First_Name ID First_Name ID First_Name 1 George 1 Romanth 5 John 5 Damien 2 Mary 3 John 2 Clara 3 Damien 6 George 7 Mary 6 Romanth 7 Clara Realistic Irreversible Repeatable Referential Integrity

13 A Modern Data Platform enables: Recap 1. Simplified data collection, synchronization, and delivery from a central location 2. Improved security with masking 3. High quality masked and unmasked data

14 Agenda Ensure compliance to disparate data privacy directives Develop catalogs of custom datasets for targeted distribution Scale an auditable process while reducing operational burden 2017 Delphix Corporation 14

15 End-to-End Process Profile Secure Audit Deliver Name SSN# Phone# CC# Name SSN# Phone# CC#

16 Data Profiling A data profiling system capable of identifying sensitive data elements in structured or unstructured data using regular expressions. It can search metadata or data and tag sensitive data in a way compatible with the inventory. Security Data Analyst Data Profiling Regexes Delphix Copy of Production Data Change Capture Metadata Integration Sensitive Data Inventory Transform Data Elements Masked Test Data Masking Algorithms

17 Regulation-Specific Masking Structure Description Examples Profiler Groups Groups of profiler expressions (regular expressions to identify data to be masked and assigned a domain). Financial, HIPAA, PeopleSoft, Oracle EBS Domain Classification of profiled data. Multiple expressions can be assigned to a domain. SSN, Account Number, Location Code, Phone Number. Algorithms Out-of-the-box and customizable entities to mask data in each domain. Secure Lookup, Segmented Mapping, Min Max, Tokenization, Data Cleansing, Free Text Redaction Jobs Used to perform actions. Profiling, Masking, Certification, and Provisioning Delphix Corporation 17

18 Replication Enable data to be efficiently transmitted between systems, locations, and agencies Refresh faster by only sending change data Reduce bandwidth requirements ON PREMISE DATA CENTER 2017 Delphix Corporation 18

19 Selective Data Distribution Secure Data Distribution (SDD) enables a Masked VDB to be replicated from one Delphix Engine to another and only copy the masked and non-sensitive data blocks. Pre-masked sensitive data blocks (in red) are redacted from the dsource ensuring only masked data leaves the production zone Delphix Corporation 19

20 Creating a Catalog of Data Options CURRENT CATALOG Multiple administrative touch points. Provision Refresh Restore Mask Convert 6 weeks 4 days 8 days 3 days 8 weeks NEW CATALOG Self-service, automated Provisio Refresh Restore Mask Convert 2 n hr 2 hr 1 hr 8 hr 8 hr Synchronize Branch Bookmark Reset 10 min 10 min 10 min 10 min New Features 2017 Delphix Corporation 20

21 A Modern Data Platform enables: 1. Pre-built masking templates and profiler groups Recap 2. Reduced barriers to data center and cloud migrations 3. Rapid development of complex applications with an advanced catalog of data operations

22 Agenda Ensure compliance to disparate data privacy directives Develop catalogs of custom datasets for targeted distribution Scale an auditable process while reducing operational burden 2017 Delphix Corporation 22

23 Jet Stream Self Service Interface Provides a framework and interfaces to optimize self-service data for apps teams Power features to accelerate collaboration and enhance developer flexibility Delivers control and management framework to ops 2017 Delphix Corporation 23

24 DevOps Readiness 2017 Delphix Corporation 24

25 Bookmark and Share DATA HOARDED AND TRAPPED DATA SHARED AT WILL VS 2017 Delphix Corporation 25

26 Proper Data Governance Dev: Comprehensive Data Features to Enable DevOps Ops: Full security, control, & resource Allocation to enable self service BRANCH REFRESH MASK RBAC Pass environments to/from Dev and QA Refresh to the latest data for high fidelity testing, analytics Replace private, sensitive data with masked values Set up role-based access controls, permissions ROLLBACK Reset to run A/B tests, recover from errors and data loss SYNCHRONIZE Dial multiple applications to exact same time BOOKMARK Mark release changes, business events SOURCE, TARGETS Enable, set automation templates for source, targets REPLICATE Replicate within, across sites, or to the cloud for DR RETAIN Store 30 days in space of one for backup restore, archive 2017 Delphix Corporation 26

27 Data Templates and Containers Data Template Description of data and resources Data Container Instantiation of template and allocation of resources Set of sources within Delphix Ability to manage resources General configuration Managed by administrator VDB for each template source Ability to version data in container Developer specific configuration Managed by a single developer 2017 Delphix Corporation 27

28 A Modern Data Platform enables: 1. Self service user interface Recap 2. New, innovative data controls 3. Proper governance over resources

29 The Biggest Brands Rely on Delphix Over 1/3 rd of the Fortune 100 rely on Delphix to move data at the speed of business. RETAIL BANKING TELECOM 3 of 5 Top Retailers 3 of 5 Top Banks 3 of 5 Top Telcos INSURANCE HIGH TECH 7 of 10 Top Insurers 6 of 10 Top Tech Firms

30 Questions? 2017 Delphix Corporation 30

31 Thank You

32 Traditional Data Management Production On-premises or cloud Non-production Target servers: physical, virtual, or cloud Production Dev Test UAT DBMS DBMS DBMS DBMS! Manually copy, move data Storage: 20 TB Storage: 20 TB Storage: 20 TB Storage: 20 TB! 60TB of redundant storage 2016 Delphix Corporation 32

33 The Delphix Data Platform Production On-premises or cloud Production DBMS One-time, full copy Installs as a virtual appliance Storage: 20 TB Storage: 7 TB 1 Capture application data, 20 TB de-duped and compressed to 7 TB 2016 Delphix Corporation 33

34 The Delphix Data Platform Production On-premises or cloud Production Time Machine May 22 08:41 May 22 12:43 May 23 06:11 Production DBMS Log shipping Storage: 20 TB Storage: 7 TB 1 2 Capture application data, 20 TB de-duped and compressed to 7 TB Continuously record unique, incremental changes to sources 2016 Delphix Corporation 34

35 The Delphix Data Platform Production On-premises or cloud Non-production Target servers: physical, virtual, or cloud Production Dev Test UAT DBMS DBMS DBMS DBMS Storage: 20 TB Storage: 7 TB Virtual Data Virtual Data Virtual Data 70-90% Storage Savings Capture application data, 20 TB de-duped and compressed to 7 TB Continuously record unique, incremental changes to sources 2016 Delphix Corporation Share data blocks instead of duplicating 35

36 The Delphix Data Platform Production On-premises or cloud Non-production Target servers: physical, virtual, or cloud Production Dev Test UAT DBMS DBMS DBMS DBMS Virtual Data Virtual Data Virtual Data Storage: 20 TB Storage: 7 TB Capture application data, 20 TB de-duped and compressed to 7 TB Continuously record unique, incremental changes to sources 2016 Delphix Corporation Share data blocks instead of duplicating Capture all changes, creating a space-efficient time machine 36