Knowledge Hub

Data Redaction is confused with data masking, neither it doesn’t work like SMD, but it works pretty much like DDM.

We know how data masking works i.e., it changes original data with random values so if data reaches into wrong hands, the identity of relevant person should not compromise.

Data Redaction also blacks out the data ON THE FLY which may or may not even make sense to the users using it.

There are four types of Data Redaction.

1. Random: Data is masked randomly
2. RedExp: Expressions are masked.
3. Partial: Some of the data is masked
4. Full: Everything is masked

We deal with Data Redaction on daily basis 😊. For example, when we do a Credit/ Debit Card transaction, a message comes on our mobiles. You must have noticed, except last few numbers all card numbers are always STARS i.e., ******* so for layperson those stars are Redacted values where partial data is masked.

Security and privacy are often mentioned in the same breath, but they serve distinct, and complementary, purposes. Both are essential pillars of responsible data management in the digital era.

Data Security is about protection. It ensures data remains confidential, accurate, and accessible only to those who are authorized. Security safeguards against unauthorized access, malicious attacks, accidental loss, and corruption of information. Techniques include access management, activity monitoring, encryption, masking, breach detection, and disaster recovery. In short, security preserves the confidentiality, integrity, and availability (CIA) of data.

Data Privacy is about rights and responsible use. It governs who can access what data, for what purpose, and under what conditions. Privacy extends beyond technical controls, covering contracts, policies, consent management, and compliance with laws such as the GDPR in Europe, the PDPA in Singapore and Malaysia, or the CCPA in the United States. Privacy ensures that individuals’ personally identifiable information (PII) is collected minimally, used ethically, and safeguarded throughout its lifecycle.

Authentication is the basic security feature of any organization. An organization without Authentication is like gold mine without any guard.

Authentication and Authorization works hands-in-hand and are a MUST-TO-HAVE in any organization or in any system or in any application.

Authentication is majorly tagged with Security whereas Authorization is majorly tagged with Privacy.

Let’s try to understand with an example, for example, in a hospital close relative, family or friends are allowed to come and meet the patient, but all these people normally are AUTHENTICATED or stopped by the guard at the main gate who checks their ID cards or anything which can assure that they are legitimate people e.g., guard can ask, why they are here etc. Once they are in, at the main hospital counter someone again asks them who they want to meet, if the patient’s name is there in system, then they are allowed to go ahead.

Implementing a robust cybersecurity strategy involves encryption, regular audits, access controls, employee training, and staying updated on emerging threats to safeguard sensitive information effectively.

Few pointers:

• Data Encryption: Employ end-to-end encryption to protect data during transmission and at rest. Utilize strong encryption algorithms to secure sensitive information.
• Access Controls: Implement strict access controls, granting users only the permissions necessary for their roles. Regularly review and update access privileges to ensure they align with current job responsibilities.
• Regular Audits: Conduct periodic security audits to identify vulnerabilities and weaknesses. Regularly assess and update security policies based on audit findings to address new threats.
• Employee Training: Provide comprehensive cybersecurity training for employees to raise awareness about potential threats. Promote a culture of security consciousness to minimize human-related risks, such as phishing attacks.
• Incident Response Plan: Develop and regularly test an incident response plan to respond to security incidents swiftly and effectively. Clearly define roles and responsibilities to minimize downtime during an incident.
• Data Backups: Establish regular and secure data backup procedures to ensure quick recovery in case of data loss or a security breach. Store backups in a remote location to save you from being compromised.
• Network Security: Employ firewalls, intrusion detection and prevention systems to monitor and protect the network. Regularly update and patch software to address known vulnerabilities.
• Vendor Security Assessment: Assess and monitor the cybersecurity measures of third-party vendors handling your data. Ensure vendors comply with security standards and protocols.
• Security Patching: Regularly apply security patches and updates to all systems and software to address known vulnerabilities. Monitor for vulnerabilities that may require immediate attention.
• Data Lifecycle Management: Implement data retention and destruction policies to minimize the risk of unauthorized access. Clearly define how data is collected, processed, stored, and disposed of throughout its lifecycle.