I seen lot of Company Use Production Data on development database/Test Database because it’s great for testing,really easy and No cost for doing this but is this right ? My View On this Topic No production data is allowed on the development. There’s lot of point to discuss to proof exactly what i mean and if it’s necessary to use it then hide it with multiple ways i will talk about it.
There is a lot more chance that the data may be compromised,This data should be removed and sanitized to make it anonymous / De-personalized.I read lot of articles every article explain something different for example This article support using Prod Data. after reading this blog ask yourself one question how the production make job easier ? by let developer/unauthorized people looking to customer Data !!!! Different point of view Customer want their data to be secure and the employees want to test the code and something easy and real to use.
Check this The Ponemon Institute has come out with some interesting (and scary) data on data security during development and testing.
This chart shows what Breach of data. It shows a lot of sensitive data such as card holder data, customer data, credit card information and business confidential information.
Personally I prefer to use a subset or dummy data use Red-Gate Data Generator,
There’s lot of security issue can be lead by Using Prod data for testing/development such as severely compromise its confidentiality, even leading to legal action.
Take this example Hannaford Brothers,In March, the Maine-based Hannaford Brothers grocery store chain
announced that 4.2 million customer card transactions had been compromised by the hackers. More than 1800 credit card numbers were immediately used for fraudulent transactions.
after all this examples is it Ok to use Prod Data On test ? Do you have a legitimate reason? do you have
Security,Encryption, Firewalls, Breech Detection , Include to that There’s difference Security Rules On prod data and Test Data , Production database For authorized People, Privacy, Auditing, Roles , Privileges lot of conditions to access it. on the other hand Development data Frequently wide open,Dozens of employees have access, Access from many to unlimited places, Home access And you still Want to use Production Data ? Do you programs care or know the difference ?
Some Rules you have to follow :
- Make your employees aware of the policies and procedures.
- If it is possible to not use production data, take that option.use alternate ways of testing scenarios.
- Ensure that production data is masked or scrubbed when it is moved out of the production environment.
if it’s necessary to use your Production Data Then Do it right by scrambling (Scrambling is the function of replacing a character (or byte) of data with a different character (or byte) of data) Oracle Provide you with solutions to do that called data masking By write your own function that will Scramble data for you.
another option could be use is encryption (Encryption is a series of algorithms used to encrypt data into nonsensical characters (not in the English alphabet)). There’s Another way you can hide production data NULL’ing Out,Substitution, Gibberish Generation ….
Finally Using live data in non-production is either illegal or expensive. For the companies using it illegally, it’s only a matter of time before somebody slips up and the practice is discovered
Read Ponemon Institute Report
12 thoughts on “Using Production Data is this Right ?”
This is what happened here…. our student information was in a test data base and then our SIN #'s, names, addresses, emails, etc were compromised.http://www.databreaches.net/ca-brandon-university-hacked-learned-of-breach-from-hacker/http://www.cbc.ca/news/canada/manitoba/brandon-university-website-shut-down-after-server-hacked-1.2186962http://www.esecurityplanet.com/network-security/brandon-university-hacked.htmlCan I ask what law it is breaking specifically? What is the Code and subsection of the law exactly? I think it is very illegal and negligent our school did this behavior!http://www.priv.gc.ca/leg_c/r_o_a_e.aspPlease help.
Thanks for sharing such a great information..Its really nice and informative.Oracle Training in Chennai
Wonderful blog.. Thanks for sharing informative blog.. its very useful to me.. iOS Training in Chennai
This article is very much helpful and i hope this will be an useful information for the needed one. Keep on updating these kinds of informative things… Android App Development Company
great and nice blog thanks sharing..I just want to say that all the information you have given here is awesome…Thank you very much for this one. web design Companyweb development Companyweb design Company in chennaiweb development Company in chennaiweb design Company in Indiaweb development Company in India
This article is very much helpful and i hope this will be an useful information for the needed one.Keep on updating these kinds of informative things… iOS App Development CompanyiOS App Development Company
Being new to the blogging world I feel like there is still so much to learn. Your tips helped to clarify a few things for me as well as giving..Fitness SMSFitness TextSalon SMSSalon TextInvestor Relation SMSInvestor Relation Text
it is really amazing…thanks for sharing….provide more useful information…Mobile app development company
Nice it seems to be good post… It will get readers engagement on the article since readers engagement plays an vital role in every Texting APIText message marketing Digital Mobile MarketingSms APISms marketing
This is excellent information. It is amazing and wonderful to visit your site.Thanks for sharing this information,this is useful to me…Mobile Marketing Service Mobile Marketing Companies
Very interesting,good job and thanks for sharing such a good blog.your article is so convincing that I never stop myself to say something about it.You’re doing a great job.Keep it upPSD to WordPresswordpress website development
great and nice blog thanks sharing..I just want to say that all the information you have given here is awesome…Thank you very much for this one.India's One of The Best Online Mobile Recharge Software Development Company, Using Our All in One Mobile Recharge Software You Can Recharge All India Operator via Single SIM Card. Free Distributor or Retailer ID. B2B or B2C Multi Recharge or Domestic Money Transfer Software Provider in India.Bulk SMS Provider in India, Promotional Bulk SMS Provider