Digital Guardian vs. Oracle Data Masking and Subsetting

When Digital Guardian works well, it really is fairly seamless. You may notice a tiny bit of additional lag on some programs, but for the most part, when it functions properly, it's fairly unobtrusive. Therein lies the rub...when it functions properly. We had frequent program conflicts with Digital Guardian. We had one issue that caused Digital Guardian to completely cripple Microsoft Outlook, and similarly cripple Microsoft Excel. It took Digital Guardian weeks to even release any kind of fix for the issue, and the first several fixes did not, in fact, resolve the issue. We ended up having to completely remove it from our environment and are still waiting for a confirmed more stable version, as it simply caused far too much disruption to our user base, and also consumed an extremely large amount of time from our admins dealing with user issues related to these problems.

Incentivized

The tool is excellent when you need to provide all the details about your clients, yet hide their identity - all while maintaining the referential integrity of the data (so child-records of the masked parent record and maintain the same fake ID of the parent).

Incentivized

• Email data leaks - DLP software must prevent certain actions to work well. Let's say you try to copy and paste an SS # to an email, or upload sensitive data to your personal email account. Guardian Edge can prevent that, and then alert administrators that it happened
• Unauthorized file copies - Guardian Edge can also prevent users from copying files from a sensitive restricted area to somewhere else where they might be able to more easily exfiltrate it. A good example would be from a company file share to a less secure server or their own home drive
• Alerting Administrators of suspicious activities - Any time a user uploads a file to an upload service or personal email, it is logged and reported as an event to be reviewed. If it found nothing in scanning the data, it will still notify you that it happened so you can review it yourself to confirm it wasn't a false negative.

Incentivized

• It offers several ways in which you can mask your data; for example, you can choose to replace all names with "real fake names", or choose to replace all SSNs with existing SSNs, but randomly assigned. You control the algorithm.
• It works on non-Oracle databases as well (in our case, we use it for both Oracle and SQL/Server).
• The overhead is minimal (it doesn't take long to run, and it doesn't consume too many system resources.

Incentivized

• Digital Guardian is perfect in database protection, hence, no complaint.
• Digital Guardian makes the detection process effective, hence, reliable.
• Finally, Digital Guardian is cloud focused or delivered, hence, concrete and efficient.

Incentivized

• The learning curve was not trivial - but we got through it.
• Cost - this product is not cheap.

Incentivized

Digital Guardian consists of an elite team of professionals, who easily [identify] any threat and the possibility of cyberattacks. Further, Digital Guardian has the ability to prioritize the handling of the database, based on the risk that each carries. Finally, Digital Guardian has [an] attack sequence that is detailed, progressive, and sustainable.

Incentivized

We also looked at Delphix: the tool was quite powerful, easy to use, and competitive from a cost standpoint. However, since our entire data warehouse environment is built on the Oracle technology stack, it made sense to us to use the Oracle product here, as it integrates very well with other Oracle database and ETL products.

Incentivized

• The professional threat detectors and cyber security analysts [increase] the reliability of the company database.
• Cloud coverage allows easy deployment and efficient systematic controls.
• Lastly, Digital Guardian [values] and monitors the procedures or the roles that every player makes in the company.

Incentivized

• We have many compliance regulations we need to adhere to. Without this tool, we were always taking a risk of exposing client information, and get penalized by the State of the Feds (the financial consequences are significant).
• So while the tool doesn't save us money directly, it greatly reduces the risk we had been taking all these years. To some degree, this is much like an insurance policy.
• Given the above, it also allows us to share information with other departments/agencies, in situations where before we simply couldn't take the risk of exposing client information.

Incentivized