|
Most organisations struggle to find a balance between the need to access and work with sensitive customer data with the need to protect the security and privacy of that data.
Security experts generally accept that some kind of breach is inevitable due to the complexity of current IT systems. They recommend a layered approach, with the final layer being some way to render the data useless by the intruder. But how can “useless data” also be used by employees and others with legitimate data access needs?
Sapior offers a new way to ensure data privacy by De-Identifying data. The traditional security methods of encryption and access control cannot ensure privacy for data that must be accessed. Sapior’s innovative solution employs techniques such as Pseudonymisation to remove sensitive details from the work environment, but leaves the patterns in the data for use in Business Intelligence initiatives, Business Process Outsourcing, and other activities.
Offshore workers and other partner organisations can identify specific accounts and records for processing without actually accessing the sensitive data. Researchers and analysts can study trends. IT staff can develop, test and maintain systems. And all the while individuals’ personal details are protected.
Pseudonymisation is recommended by the UK Information Commissioner for enhancing the privacy of health data, but these benefits can be applied across all industries dealing with sensitive or regulated information.
Sapior Production:
- Reduces the risk and impact of security breaches
- Secures offshored and outsourced systems and activities
- Provides VIP treatment for all customers
- Manages “cradle-to-grave” pseudonyms like credit card, account, social security numbers
- Facilitates Regulatory Compliance
- Excellent for CRM, Customer Behaviour Analysis, Credit Risk Analysis, Data Pooling
Special Situations
VIP Treatment - For organisations with VIP customers, masking only VIP data marks it out as particularly interesting. Sapior Production offers a way to protect all customers from the inquisitive eyes of both malicious and unwitting workers, whilst avoiding the singling out of particular accounts with special private handling.
Cradle-to-grave Pseudonyms - Social Security, National Health Service (NHS), credit card account and other special numbers that follow an individual for long periods of time throughout his or her life are pseudonyms that have turned into sensitive identifiers. Many IT systems rely on these Cradle-to-Grave pseudonyms to identify individuals because they make it easy to link individuals across separate databases. An example of this is the common use of Social Security numbers in the US.
Cradle-to-Grave pseudonyms make it easier to track an individual’s history for both legitimate and fraudulent reasons. Reliance on these sensitive identifiers has increased the risk of identity theft. The Sapior solution de-sensitise and manage Cradle-to-Grave pseudonyms over the life of an individual. With Sapior, it is still possible to track an individual whilst minimising the risk of identity theft.
Unmasking the Individual - Sometimes it is necessary to link back to an individual’s sensitive information. Offshore workers might have to inspect an issue with a particular account. Medical researchers may have results that should be reported to an individual via their doctor. With the Sapior solution, it is possible to link back to the original sensitive information when necessary, for example in an audited environment.
|
