MVSFORUMS.com

[Dibakar]

I am looking for user experience with data masking tools. By data masking I mean replacing personally identifiable information in production extracts by other values so that test environments using the extracts work naturally without revealing sensitive data.

I have used BMC Data Solutions and Data Privacy. If you have used other tools, could you please share your experience - what kind of masking you do, what are the challenges with the tool. Also if you could share documents/hyperlinks.

We generally do the following -

• Replace using lookup tables
  
• Encrypt based on a key
  
• Replace by blanks or a default string
  
• Replace based on the value in another field
  
• Add/Subtract from original value
  

_________________
Regards,
Diba

[kolusu]

Dibakar,


You can use Cryptographic services to encrypt the data

https://www.ibm.com/docs/en/zos/3.2.0?topic=zos-cryptographic-services

You can also use "Data Privacy for Diagnostics" and there are a few samples in sys1.samplib

https://www.ibm.com/docs/en/zos/3.2.0?topic=aids-data-privacy-diagnostics-dpfd
_________________
Kolusu
www.linkedin.com/in/kolusu

[Dibakar]

Thanks Kolusu!

Simply encrypting or redacting will not serve our purpose. We need to make meaningful changes, like changing name to a valid name. So changing "Dibakar" to "Suleman" is okay but not "Qwertyu". For this purpose we would create lookup tables to make the changes. "IBM InfoSphere Optim Data Privacy" may serve our purpose but would like to hear firsthand experience.
_________________
Regards,
Diba