Welcome to the exclusive page for participants of the 2024 FDIC Data Summit in Arlington, VA.
IRI is proud to participate in the event and created this page to share some details about the test data project underway, and introduce other data masking and manipulation solutions provided through the IRI Voracity data management platform in use.
According to the 2023 IBM Cost of a Data Breach report, the average cost of data breaches in the public sector soared to $2.60 million, a 20% increase from $2.07 million in 2022. This statistic underscores the significant financial impact of cyberattacks on the public sector, highlighting the need for robust cybersecurity measures and preparedness to mitigate these costs.Data masking is a proven way to mitigate or nullify the effect of a data breach.
Success with Test Data Masking at FDIC
Following an extensive POC in 2022, a test database masking project was initiated using the IRI FieldShield data masking product in the IRI Voracity data management platform. The combination of software and professional services rendered has thus far succeeded in preserving both the realism and security of the test schema.
Here's what's been done in one department:
Data Classification & Discovery
IRI supports the definition and grouping of classes of Personally Identifiable Information (PII), such as names, email addresses, SSNs, phone numbers, etc. according to sensitivity level and privacy laws. The data classes are associated with search methods used in schema- or LAN-wide discovery, and with masking rules. In this case however, the FDIC had locations and rules in a file that an IRI wizard imported to populate the FieldShield data class map used for consistent multi-table masking.
Masked Over 100 Tables
We applied both reversible and non-reversible masking functions to more than 100 tables. The functions were tailored to the security team's specific needs. The schema data class masking job wizard in the IRI Workbench GUI for FieldShield can automate the generation of table-specific masking scripts and their interacting models and transformation mapping diagrams.
Special Procedures
We developed many custom processes using built-in IRI data transformation functions. One such process involves identifying sensitive items and replacing them with consistently masked values from synthetic but realistic sources. This consistency ensures the uniform handling of sensitive data and thus referential integrity. In addition to data masking functions, built-in IRI data generation functions can generate realistic set files used for pseudonymization or synthesis.
IRI Voracity: A Comprehensive Suite
The IRI Voracity platform includes a vast array of high performance data manipulation and management functions for government agencies, like the FDIC, with big or sensitive data. Voracity emphasizes speed and security as it efficiently combines data integration and governance for analytic delivery and privacy law compliance. The platform combines advanced technologies and leverages decades of expertise, and is suited for integration into multi-agency projects like this one abroad.
Voracity consolidates data discovery, integration, migration, governance, and analytics into a central job design environment built on Eclipse and powered by the decades-proven IRI CoSort engine. This comprehensive approach can help government agencies navigate the complexities of data management and adhere to stringent regulatory requirements using a familiar user interface, common metadata framework, and on-premise architecture.
FDIC & Beyond: Wide Applications
IRI Voracity platform components, shown below, improve big data processing efficiency and data-centric security in a large variety of use cases. Specific Voracity data protector suite components like FieldShield can classify, search, risk-score, and protect production and test data in relational databases and many other data sources with a wide range of robust masking functions. Its consistent rule-based approach ensures uniform masking of sensitive items regardless of source, preserving data security and integrity enterprise-wide.
The IRI DarkShield product, also in Voracity, uses the same data classes and masking functions as FieldShield, but extends the reach of data discovery and de-identification for production or test data in structured, semi-structured, and unstructured data sources in files or databases (relational and NoSQL), both on premise and in cloud platforms like Azure.
IRI RowGen supports the generation of structurally and referentially correctsynthetic test data in RDBs and files, with a great deal of additional value customization. DarkShield can also use synthetic values created in IRI RowGen to replace original values in documents and images to support document-related systems testing.
All Voracity target data and operational log data can feed Splunk indexes directly as well. Beyond masking-related features are MANY other data management capabilities built into the platform that the FDIC already has licensed.
IRI Voracity: What's Included
The IRI Voracity data management platform was designed to cater to the distinct demands of corporate and government entities seeking speed and security across a variety of production data processing and test data management use cases. It bundles several component products and additional modules, wizards, editors, and libraries to combine and extend your functional possibilities.
Click on these IRI Voracity component product links to learn more about each one:
- FieldShield, for PII classification, profiling, search, re-ID risk scoring, and complex masking needs in DBs and flat files
- CellShield Enterprise Edition for PII discovery and masking directly in Excel sheets
- DarkShield, for finding and masking PII in structured, semi-structured, and unstructured data sources
- RowGen, for subsetting databases and synthesizing highly realistic data for testing (vs. masking production data)
- Ripcurrent, for real-time change data capture, replication, and incremental masking of popular relational DBs
- CoSort, for high-speed sorting, transformation and wrangling of structured data for JCL sort migration, ETL, and BI
- FACT (option), for the fast (parallel) extraction of very large Oracle, DB2 and other relational DB tables to flat files
- NextForm, for the conversion or migration of data types, file formats, and relational DBs
IRI Self-Learning Content
Click this link to browse (or search) how-to articles and videos by topic and product!
Contact Us
Organizations of all industries and sizes have trusted IRI as their data management software provider since 1978. You can learn more about who they are and how they use the software here.
If you would like to discuss your requirements with us and try the software, please schedule time online through our live demo page here. If you have any questions in the meantime, please email info@iri.com.
