Applications

Expand all | Collapse all

Masking Bank Account numbers

  • 1.  Masking Bank Account numbers

    Posted 26 days ago
    We have a requirement to mask Customer bank account numbers in the Oracle EBS database.  I wonder what options we have and how they work.  We are on application version 12.2.8 and database version 12.1.0.2.0.

    Thanks​

    ------------------------------
    Steven Matchett
    Sr. Functional Developer
    Public Employees Retirement Fund (Indiana)
    Indianapolis IN
    (317) 213-5872
    ------------------------------


  • 2.  RE: Masking Bank Account numbers

    Posted 25 days ago

    Hi Steve,

     

    What is the goal of masking your Customer bank account numbers?

    For example: the DBA-er is not allowed to see the Customer bank accounts.

    Or other reasons?

     

    To the best of my knowledge when you use masking in Oracle EBS, the original bank account number is still visible in the Oracle Database in a separate column, but the end user sees the masked bank account number.

     

    If you send me what you want to achieve with masking the Customer bank account numbers, I am happy to ask internally what other options you could consider to reach your goal.

    (If your company considers to move to Oracle ERP Cloud, you will have more possibilities for encryption and masking.)

     

    Best regards,
     
    Willem van Wijngaarden
    Managing Director

    US:       +  1  888 905 73 11

    Mobile: +31 (0) 6 22 39 10 61

    E-mail: wvanwijngaarden@apro.nl

    www.aprosoftwaresolutions.com

    Text  Description automatically generated                                     

    ___________________________________________________________________________________________________________________

    The contents of this email and any attachments are confidential. It is intended for the named recipient(s) only.
    If you have received this email in error please notify the system manager or the sender immediately and do 
    not disclose the contents to any one or make copies.

     






  • 3.  RE: Masking Bank Account numbers

    Posted 25 days ago
    Hi Steven,
    We have been masking our bank account and social security numbers for awhile now.  Would you like or do you have the time to discuss how we did it?

    ------------------------------
    Lisa Pruitt-Matthews
    Business Analyst
    Hampton Roads Sanitation District (HRSD)
    Virginia Beach VA
    (757) 460-7213
    ------------------------------



  • 4.  RE: Masking Bank Account numbers

    Posted 25 days ago
    We mask our numbers for multiple reasons, but one of the reasons is that our Managed Services Team can not see it in our Non Production environment.

    ------------------------------
    Lisa Pruitt-Matthews
    Business Analyst
    Hampton Roads Sanitation District (HRSD)
    Virginia Beach VA
    (757) 460-7213
    ------------------------------



  • 5.  RE: Masking Bank Account numbers

    Posted 25 days ago
    We have encrypted the tables that contain supplier and customer bank account numbers, and have started a project to scramble the bank account numbers in non-Production instances, at the request of our IT Security team.  I assume we are doing this for GDPR.

    ------------------------------
    Andrew Marino
    Director, CBS Finance Functional Excellence
    Cummins, Inc.
    Columbus IN
    (812) 377-4410
    ------------------------------



  • 6.  RE: Masking Bank Account numbers

    Posted 25 days ago
    We scramble to and that has been working well for us.

    ------------------------------
    Lisa Pruitt-Matthews
    Business Analyst
    Hampton Roads Sanitation District (HRSD)
    Virginia Beach VA
    (757) 460-7213
    ------------------------------



  • 7.  RE: Masking Bank Account numbers

    Posted 25 days ago
    You can use MOS note 726335.1 to mask credit card and bank account information by application.

    ------------------------------
    Thomas Mullen
    Solutions Architect
    Sandia National Laboratories
    Albuquerque NM
    (505) 263-4507
    ------------------------------



  • 8.  RE: Masking Bank Account numbers

    Posted 25 days ago
    Interested in this also.  Just reviewed an audit report with a group asking about various things and 'Sensitive Data in non-production instances' was highlighted.
    So to take advantage of encryption and to 'scramble our data' what products do you need to be licensed for? We are an on-prem setup 12.1.3 and typically don't have additional database options that you need to license so can someone highlight that for me like Lisa?  Private email is ok also.
    I'm aware of Data Safe (not using it) and I think if we were in the cloud we could subscribe to advanced security which provides TDE for example.  At any rate I am not well versed in this so I'll just stop and look for feedback.

    ------------------------------
    Mark Schlechte
    DBA
    City of Regina
    Regina SK
    ------------------------------



  • 9.  RE: Masking Bank Account numbers

    OATUG Star Partner
    Posted 24 days ago
    Check out Mentis Software, they've been the leader in Masking data in Oracle EBS for 15 years.  It's so incredibly important to mask sensitive data and it's a widely overlooked area.  Mentis not only masks your data but helps you determine where your sensitive data is, the different ways people might interact with it (forms, standard reports, custom reports, ad hoc reports, custom forms, apex forms, database queries, interfaces, etc), and their solution can even scramble data in non-prod environments so that you can bring in third-party consultants and let them do work on your behalf without having so see any real data  It's a very practical and clever solution.

    ------------------------------
    Rob Lepanto
    Partner
    API Wizard
    Stamford CT
    ------------------------------



  • 10.  RE: Masking Bank Account numbers

    CO19 Speaker
    Posted 23 days ago
    Edited by Kai Glittenberg 23 days ago
    Hi Steven,

    no need for any third party extensions. You can mask banking details within the "Funds Capture Setup Administrator" responsibility. That should suffice for your needs.


    Thanks
    Kai

    ------------------------------
    Kai Glittenberg
    Solution Architect Cloud Services
    Apps Associates
    Dortmund
    (491) 603-655544
    ------------------------------



  • 11.  RE: Masking Bank Account numbers

    OATUG Star Partner
    Posted 23 days ago
    The OP was asking about banking details but someone else on the thread asked about sensitive data in general.  There are a lot of gaps in Oracle EBS' handling of sensitive data and a third-party app like Mentis would help you manage other sensitive info like your customer master, order history, part prices, hr info, BOM details, financial info, and so forth.   It's definitely worth looking into.  Maybe you will decide you don't need it - but you'll learn a lot by checking out what they offer.  As an FYI, I have no relationship with Mentis, I've just seen them in the marketplace and know several customers that use them.

    ------------------------------
    Rob Lepanto
    Partner
    API Wizard
    Stamford CT
    (646) 783-8025
    ------------------------------