IBM InfoSphere Optim Data Privacy

Mitigate the risk of a security breach

Protect Sensitive Big Data with InfoSphere Data Security & Privacy Solutions

IBM InfoSphere® Optim™ Data Privacy provides extensive capabilities to effectively mask sensitive data across non-production environments, such as development, testing, QA or training. To protect confidential data this single offering provides a variety of transformation techniques that substitute sensitive information with realistic, fully functional masked data. Examples of the masking techniques include substrings, arithmetic expressions, random or sequential number generation, date aging, and concatenation. The contextually accurate masking capabilities help masked data retain a similar format to the original information.

→ Read the white paper: Closing the data privacy gap

Product benefits

Mask confidential data on demand

Apply a range of masking techniques on demand to transform personally identifying information and confidential corporate data in applications, databases and reports.

Reduce risk, improve governance

Data masking features help you to prevent misuse of information by masking, obfuscating, and privatizing personal information that is disseminated across non-production environments.

Quickly implement regulations

Predefined actionable data privacy classifications and rules help you to speed data privacy implementation initiatives and provide a method to report on compliance.

A safe sandbox for testing

Substitute test environments with realistic, fictionalized data, creating a safe environment for application testing that more accurately reflects end-to-end business processes.

Key features of InfoSphere Optim Data Privacy

Data transformation techniques

Prepackaged data masking routines enable you to transform complex data elements such as credit card numbers, email addresses, and national identifiers, while retaining their contextual meaning. Integration with the Information Governance Catalog provides 30 predefined data classifications and 30 predefined data privacy rules. You also have the ability to deploy masking as a service as part of a variety of database cloud offerings in IBM Cloud™.

Data privacy components

There are three data privacy components: a stand-alone API providing a flexible, extensible means of accessing predefined and user-developed data masking services; a data privacy application that provides a graphical user interface to mask data in CSV and XML files or a command line interface to mask data from a Hadoop environment; and user-defined functions (UDFs) for databases that can be included in SQL scripts or statements to dynamically mask data within a database management system.

Compliance with data privacy laws

Optim Data Privacy can help organizations improve and meet compliance requirements with the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), Digital Due Process (DDP) requirements, Personal Information Protection and Electronic Documents Act (PIPEDA), the Safe Harbor requirements and Payment Card Industry Data Security Standard (PCI DSS).

Format Preserving Encryption (FEP)

Optim Data Privacy supports Format Preserving Encryption (FPE) and is based on the Advanced Encryption Standard 256-bit (AES-256) algorithm providing the capability to produce unique masked values that are extremely varied and without a discernible pattern. It offers repeatable masked values when using the same key and provides better security by allowing the user to define an encryption key. Data protection is enhanced because Optim Data Privacy does not provide a decryption capability.

Enterprise data masking solution

This single, scalable data masking solution integrates with commonly used applications, including Oracle E-Business Suite, PeopleSoft Enterprise, Siebel, JD Edwards EnterpriseOne, SAP and Amdocs CRM. It supports IBM Db2®, IBM Information Management System (IMS), Virtual Storage Access Method/Sequential (VSAM/SEQ), e-Adabas, Postgres, Informix, Oracle, Sybase, SQL Server and XML database technologies and works with Microsoft Windows, Unix, Linux® and IBM z/OS® operating systems.

Predefined data privacy reports

Data privacy compliance reports can help you understand your organization’s risk exposure. The predefined reports included with the Optim Data Privacy solution are the Data Masking Compliance Report, Data Masking Enforcement Report and the Statistics by Masking Status, Data Store, and Database Management Systems Report.