Achieving outstanding Optim Data Management practice within your Oracle Environment Ben Davis IBM Data Governance Specialist

Challenges around governing the usage, sharing and processing of massive amounts of electronic data •  Growing infrastructure and resource management

costs –  No policies for management of data growth – performance

degradation –  Redundancy of data –  Disparate, complex applications and more users

•  Lack of common security and privacy requirements –  Risk of security breaches, compliance, audit failures –  No ability to assess areas of vulnerability and prevent

unauthorized intrusion –  Lack of an overall protection strategy (relational / non-

relational data and access controls)

•  Lack of trusted information –  No alignment of definitions across business and IT –  No clear understanding of data sources & relationships –  No standardized quality rules or threshold metrics –  Lack of control over test data environments

“[A]n [information management] strategy should incorporate life-cycle information governance practices [to ensure] consistent execution of ... business optimization, agility, and transformation [initiatives].”

– Forrester Research, Inc., “Refresh Your Information Management Strategy to Deliver Business Results”

Rob Karel & James G. Kobielus, August 2009

“If you are going to protect your company's most valuable asset—your data—you will begin to view data security as a component of a more comprehensive information governance strategy.”

– Hurwitz & Associates, “Why you need an information governance strategy for 2010”

Marcia Kaufman, December 2009

“By 2013, 25% of the companies in highly regulated industries will create and staff positions in accounting, human resources, compliance and audit and law that deal explicitly with the management of information via technology.”

– Gartner, Inc., “Organizing for Information Governance” Debra Logan, November 2009

InfoSphere: Collaborative Information Governance

Single  solu+on  provider  to  Op+mize  the  Informa+on  Supply  Chain  

Reusability and consistency •  Shared metadata and policies

Breadth of portfolio •  Three core information governance

disciplines Modular deployment entry points

•  Supports business and IT priorities Flexible support for enterprise environments

•  Open technology for heterogeneous support

4

Infosphere Optim, a True Enterprise Data Management solution

Data Growth Data Masking Test Data Management Application Retirement

Achieve  Faster  Closes  

Improve  Financial  &  Managerial  Repor8ng  

Decrease  Finance  Costs  

Improve  Corporate  Performance  

Improve  Corporate  Governance  &  Transparency  

Financial Management

IBM InfoSphere Optim Solutions for Oracle E-Business Suite

Improved  Employee  Performance  

Decreased  Cost  of  Employee  Administra8on  

Increase  Revenue  per  Employee  

Protect  Employee  Privacy  

Increase  Employee  Reten8on  

Human Resources / HCM

Reduced  Order  to  Delivery  Time  

Reduced  Manufacturing  Costs  

Improved  Demand  Forecas8ng  

Reduced  Planning  Cycle  

Decrease  Procurement  Costs  

Supply Chain Management

Oracle & IBM InfoSphere Optim

•  Long time-partner of Oracle - Certified Advantage Partner –  Involved in Oracle’s Beta programs (early adopters of Oracle software) –  Active in the Oracle Application Integration Initiative, which validates our solutions –  Perform in-depth system tests using Oracle experts to ensure continued compatibility with

Oracle’s products •  Only Oracle partner offering a single, consistent data management solution – validated by Oracle

and applicable across entire Oracle stack –  Oracle E-Business Suite, PeopleSoft Enterprise, JD Edwards EnterpriseOne, Oracle Retail

(Retek), Siebel –  All custom and packaged applications running on Oracle databases

•  The first partner selected and validated by PeopleSoft, Siebel & JD Edwards for database archiving and enterprise data management

InfoSphere Optim Solutions for Oracle E-Business Suite Summary

Archiving   Test  Data  Management   Data  Privacy  

Archive  the  right  set  of  data   Subset  data  based  on  test  requirements  

Masking  of  data  with  out  of  the  box  algorithms  

Store  data  on  any  choice  of  media   Re-­‐use  of  extract  data  for  mul>ple  target  environments  

Consistent  masking  across  the  data  model  

Access  the  archived  data  via  mul>ple  methods  

Compare  data  sets  to  see  differen>al  changes  

Credit  card  number  generator  and  Australian  addresses  

Restore  the  archived  data  if  required  

Rela>onally  edit  the  data  for  error  tes>ng  

Common  templates  for  Oracle  environments  

All  delivered  using  a  single  tool  with  a  common  interface  

Financial    

Supply  Chain  Solu8ons  

HRMS  Manufacturing  Solu8ons  

Extensive Oracle E-Business Suite Coverage

•  General Ledger •  Accounts Payable •  Accounts Receivable •  Fixed Assets •  Cash Management •  Global Accounting Engine •  Sub-Ledger Accounting

§  Inventory  §  Work  In  Progress  

§  Bill  of  Material  

§  HR  &  Payroll  

E-­‐Business  Versions  Supported:  11.5.10,  12  (earlier  versions  supported  via  services)  

§  Order  Entry  §  Shipping  Execu8on  §  Advanced  Pricing  

Procurement  

§  Purchasing  

Projects  

§  Project  Cos8ng  &  Billing  

CRM  

§  Service  Contracts  

Archiving

Archive the Right Set of Data Referential Integrity – the Complete Business Object

•  Represents application data record – payment, invoice, customer

–  Referentially-intact subset of data across related tables and applications; includes metadata

•  Provides “historical reference snapshot” of business activity •  Federated object support across enterprise data stores

Archive the Right Set of Data Complete Business Object Example – General Ledger

GL_JE_CATEGORIES_TL  

GL_JE_SOURCES_TL  

GL_ENCUMBRANCE_TYPES  

FIND_CURRENCIES  GL_JE_BATCHES  

GL_JE_HEADERS  

GL_JE_LINES  

GL_IMPORT_REFERENCES  

GL_JOURNAL_REPORTS_ITF  

GL_ALLOC_BATCHES  GL_ACCOUNT_HIERARCHIES  

GL_ALLOC_FORMULAS  

GL_PERIODS  

GL_PERIOD_SETS  

GL_PERIOD_STATUSES  

GL_SETS_OF_BOOKS  GL_CODE_COMBINATIONS  

Records  in  table  removed  from  database  during  archive  process  

Records  in  table  selected  during  archive  process,  but  not  removed  from  database  

Table  is  not  processed  by  archive  

Table  captured  as  reference  table  during  archive  process  

Compressed Archives

2 -

4 Y

ea

rs

Activ

e/Hist

orica

l Onl

ine

XML

Archive Database

Archive Data Storage Flexibility

Non DBMS Retention Platform

ATA File Server EMC Centera™, DR550, Etc. 4

- 6

Ye

ars

On

/Nea

r-Lin

e Ar

chive

Off-line Retention Platform CD,Tape,Optical, WORM HP StorageWorks™, IBM TSM NetApp NearStore® SnapLock™, IBM Total Storage® solutions (including the DR550) EMC Centera™.

6+ Y

ea

rs

Off-L

ine A

rchi

ve

IBM® Optim™

§  Access Definitions §  Complete Business Object §  Business Rules §  Validations

1 - 2 Years Current Data

Production Database

Extract

Restore

U N I V E R S A L A C C E S S

Additional Options

ODBC / JDBC XML

SQL

Excel

Access

Test Data Management

§ Applica>on  errors  in  produc>on  § Slower  applica>on  releases  

§  Need  new  features  ASAP  §  Applica>on  becomes  “stale”  

 

Challenges associated with Test Data

§ Storage  cost  spiral  due  to  cloning  § Constantly  use  produc>on  like  data  for  tes>ng  § DBA  effort  to  maintain  non  produc>on  environments  

§ Inaccurate  test  results  §  Age  of  data  §  Data  “recycled”  during  tes>ng  §  False  result  tes>ng?  

§ Extended  tes>ng  phases      

Production Environment

Baseline Clone

Test (DB2 UDB/ AIX)

Dev (Oracle/ Solaris)

QA (Sybase/ Linux)

Extract/ Archive File

Dynamically load relational intact data sets & objects based on selection criteria

IBM Optim

Fully Leverage-able Solution Test Data Management

§ Faster  applica>on  releases  § Less  applica>on  release  errors  

Benefits of Optim Test Data Management solution

§ Smaller,  more  manageable  non  produc>on  environments  

§ Speed  itera>ve  tes>ng  cycles  § Ability  to  regression  test  § Power  to  refresh  data  easily    

§ Reduce  applica>on  errors  § Test  error  condi>ons  § Compare  data  before  and  aNer  test  cycles  

About  the  Client  

Client Success: Test Data Management §  Challenges:  

–  2TB  database  that  was  con>nually  growing,  therefore  a  large  volume  of  test  and  development  data  was  consuming  large  volumes  of  disk  space  

–  Enormous  effort  to  con>nually  provide  test  data  for  mul>ple  environments  

–  Protect  the  iden>ty  of  their  customers  by  consistently  masking  all  sensi>ve  informa>on  

§  Client  Value:  –  Reduced  capacity  requirements  in  all  non-­‐produc>on  environments  by  20%  –  Reduced  GL  capacity  by  90%  –  Reduced  AP  capacity  by  79%  –  Reduced  PO  capacity  by  68%  –  LiWle  modifica>ons  to  out  of  the  box  templates  provided  by  Op>m  resul>ng  in  

a  fast  deployment  

Industry Government

Location New York State

Application Oracle E-Business Suite

Solution Optim™ Test Data Management Solution for Oracle E-Business Suite

Optim Data Privacy

The Corporate View of Data Privacy •  Read all about it…

–  Data breaches –  Identity Theft

•  Laws are multiplying –  PCI –  GLBA –  HIPAA –  Data Breach Notification Acts

•  6 Data Breaches per F1000 company per year is the Industry Norm*

•  Data Privacy Projects are still more reactive then proactive •  Development, Backup and Testing environments remain

vulnerable! •  Bottom Line…Companies are having trouble securing

sensitive data!

19

* Source: IT Compliance Group, 2007

So where is sensitive data kept?

A. Everywhere •  ERP •  CRM •  Billing •  Customer •  Data Warehouse •  Reporting

Production

SIT

Dev

UAT

Perf Test Training

“Although much angst and security funding is given to

offline data, mobile devices, and end-user systems, these

assets are simply not a major point of compromise.”

Database Servers Are The Primary Source of Breached Data

21

www.verizonbusiness.com/resources/reports/rp_2010-­‐DBIR-­‐combined-­‐reports_en_xg.pdf  2010  Data  Breach  Report  from  Verizon  Business  RISK  Team  

…up from 75% in 2009

What is sensitive data?

•  Personally Identifiable Information (PII) •  Financial Data (General ledger) •  Strategic information (buyouts, mergers)

All of it is valuable to someone who has the intent to steal it and use it to their advantage

Data Privacy Delivered throughout your EBS environment

A comprehensive set of data masking techniques to transform or de-identify data, including: § String literal values § Character substrings § Random or sequential numbers

§ Arithmetic expressions § Concatenated expressions § Date aging

§ Lookup values § Intelligence

Pa>ent  Informa>on  

Patient No. SSN

Name

Address

City State Zip

112233   123-­‐45-­‐6789  Amanda  Winters  

40  Bayberry  Drive  

Elgin   IL   60123  

123456   333-­‐22-­‐4444  Erica  Schafer  

12  Murray  Court  Aus>n   TX   78704  

Data  is  masked  with  contextually  correct  data  to  preserve  integrity  of  test  data  

About  the  Client  

Client Success: Data Privacy §  Challenges:  

–  Protect  the  iden>ty  of  individuals  within  their  database  –  3rd  party  access  and  servers  managed  by  Vic  Shared  Services  

–  Large  number  of  the  workforce  are  contractors  

§  Client  Value:  –  Op>m  solu>on  was  3  x  >mes  cheaper  than  rival  

–  Deployed  within  20  days  –  Future  capability  to  provide  subsedng  using  the  same  tool  

–  Skills  transfer  of  solu>on  to  staff  to  enable  further  enhancements  

Industry Government

Location Victoria Australia

Application Oracle E-Business Suite

Solution Optim™ Test Data Management Solution for Oracle E-Business Suite

§ Protected  customer  base  

§ Compliance  against  privacy  legisla>on  and  regula>ons  

§ Specific  industry  requirements  

§ Audit  ready  data  

Benefits of Optim Data Privacy solution

§ Provide  a  range  of  easy  to  use  data  privacy  op>ons  for  masking  data  

§ Valid  CC  numbers  

§ Australian  addresses  § Rela>onally  de-­‐iden>fy  data  across  the  database  

§ Ability  to  share  data  with  3rd  par>es  

And Questions from the floor???