From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Securing test data

Securing test data

From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Start my 1-month free trial Buy for my team

Securing test data

“

- [Jared] You'll get the most out of your testing activity if you leverage quality data, and who doesn't love quality? It's important for a CSSLP to understand how to generate useful test data as well as secure methods for reusing production data. But Jared, if we need quality data for test purposes, couldn't we just use a copy of the production dataset? Well, yeah, you could, and in some cases you may do just that, but production data tends to contain stuff that you spend a lot of time and money trying to protect. As soon as you pull that data out of prod and drop it in a non-production environment, you're leaving it open to attack, and if you end up in the middle of a data breach because you were testing with production data, then you're going to have a bad time. You can build out useful test data that looks and feels like production data without containing any information that an attacker might be interested in. In order to do that, you want to build out a dataset that has three…

Contents