Report reveals data security risks in non-production environments

Perforce has released the inaugural Delphix 2024 State of Data Compliance and Security Report, featuring data from a global survey of 250 senior-level respondents from large organisations. The report explores the volume of sensitive data in non-production environments, such as development, testing, analytics, and AI/ML.

Some key findings from the survey include that 54% of organisations have experienced a data breach or theft involving sensitive data in non-production environments, and 53% have faced audit issues and failures related to non-production.

The report also highlights broader concerns, with 91% of organisations worrying about the expanded exposure footprint across all non-production environments. In addition, 86% of organisations allow data compliance exceptions in non-production.

Ann Rosen, Director of Product Marketing for Delphix by Perforce, commented on the importance of protecting sensitive data in non-production environments. "Our goal with this report is to share the realities of sensitive data exposures in non-production to help enterprises better protect their data moving forward," said Rosen. "Companies need to do more to protect sensitive data."

Concerns about data privacy in AI environments are particularly pronounced. The report notes that 85% of enterprises are worried about regulatory non-compliance in AI settings, and 68% perceive a lack of solutions to address data privacy in these environments.

Rod Cope, Chief Technology Officer of Perforce Software, stated, "AI is transforming industries, and data is at the heart of AI. When it comes to AI and data, it can be a double-edged sword. There's a lot of excitement around the innovation possible in AI, but data in AI environments must be protected."

The findings further show that many organisations opt for tools and methods like static data masking to mitigate data security concerns. 66% of the surveyed organisations currently use this approach.

David Wells, Product Lead of Compliance Products for Delphix by Perforce, emphasised the importance of static data masking in safeguarding test and development data. "We hear all the time from customers that exceptions are given because it's too complicated and time-consuming to achieve compliance without slowing down development or impacting quality," said Wells. "At Delphix and Perforce, we believe that with the right approach, you can achieve compliance rapidly without bottlenecking innovation."

The report underscores the complexity of managing sensitive data, especially with the rise of AI, and the necessity for robust compliance solutions in non-production environments. Companies are encouraged to adopt methods like static data masking to ensure data privacy and regulatory compliance while maintaining the efficiency of their development processes.