Blog

<p>&nbsp;In today's interconnected world, "privacy" is frequently seen as a pillar of "security", yet they represent distinct concepts crucial for safeguarding sensitive information. Since privacy impacts many professions, it's imperative to unravel the disparities between these two programs and understand their unique significance, especially within the context of business operations.</p><h3>Navigating Nuances</h3><p>At its core, any textbook and common security practices tell you security encompasses a triad of principles: confidentiality, availability, and integrity. </p><p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - <strong>Confidentiality</strong> ensures that data is accessible only to authorized users, shielding it from unauthorized access or disclosure. </p><p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - <strong>Availability</strong> guarantees that data is accessible to authorized users whenever needed, without compromise. </p><p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - <strong>Integrity</strong> ensures that data remains accurate, complete, and unaltered throughout its lifecycle. </p><p>Security measures such as encryption, access controls, and firewalls serve as protections against a myriad of threats aiming to compromise either confidentiality, availability, or integrity.</p><p>Conversely, privacy primarily revolves around confidentiality, emphasizing the individual's right to control the collection, use, and dissemination of their personal data. It's about fostering trust and transparency by respecting individuals' autonomy over their information. Privacy regulations such as the GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act) delineate stringent guidelines governing the handling of personal data, mandating consent mechanisms, data minimization practices, and robust data protection measures. </p><p>While the two are separate practices they are interdependent. Privacy depends on personal data being secure - as a lack of security compromises a business’s responsibility to protect private information. Also, security depends on the privacy of credentials that are needed to implement access control across a system.&nbsp;<br></p><h3>Interdependent Approach</h3><p>Businesses must recognize that while security is indispensable, privacy augments its essence by prioritizing individuals' rights and expectations regarding their personal information. Consequently, the approach to privacy necessitates a more nuanced and empathetic perspective, rooted in ethical considerations and respect for individual autonomy. Therefore, organizations should have two separate offices to enforce privacy and security. Keeping privacy as part of security, will limit the reach and priority of privacy requirements.<br></p><p>To effectively navigate the complexities of privacy, businesses should adopt a proactive stance, integrating privacy-by-design principles into their operations. This entails embedding privacy considerations at the outset of product development and service delivery, rather than treating them as an afterthought. Conducting comprehensive privacy impact assessments and implementing privacy-enhancing technologies fortify the organization's resilience against privacy risks, fostering a culture of accountability and trust. By championing privacy as a fundamental human right, businesses not only mitigate legal and reputational risks but also cultivate enduring relationships based on mutual respect and trust.</p><p>In conclusion, while security and privacy are intertwined, they cover distinct areas crucial for safeguarding sensitive information in today's organizations. By embracing privacy as a core value and integrating it into their operations, businesses can forge a path towards sustainable growth and resilience in an ever-evolving landscape of privacy concerns and regulatory scrutiny.</p>

The Difference Between Security and Privacy

<p>Storing null values is an important feature of any database. Knowing if data is stored is an essential operation to quickly sort and retrieve data. Providing your application function to pass nothing or no information is key to many workflows where partial or incomplete transactions should be persisted. Let's take a look into how to best leverage null values to optimize or database. <br></p><h3>The Silent Players<br></h3><p><em>Why should we care about storing nothing?</em>&nbsp; Knowing that nothing has been stored for a particular column or field is just as important as understanding the value if something was stored. Thinking about how your database will handle null values should be defined when you first build your data model as well as when you are designing your queries to interact with the data. Additionally, nulls are key to understanding if data can be used for analytics or AI development.</p><h3>All Upside<br></h3><p>There are so many good things from using null values properly. This way databases can efficiently hold data that is empty or partial information to accurately reflect a business process. Nulls can provide the following:&nbsp;</p><p>- <strong>Query performance improvements: </strong>Null values provide database professionals with the flexibility to index columns efficiently. This allows for faster search operations, as nulls are indexed separately, contributing to improved query performance.</p><p>- <strong>Better data quality: </strong>By utilizing null values, database professionals can avoid the introduction of misleading information. Nulls serve as clear indicators of missing data, preventing misinterpretation, and ensuring that decisions based on the database are made with a comprehensive understanding of the available information.</p><p>- <strong>Enforce referential integrity: </strong>Null values provide a controlled way to delete or update records without violating referential integrity constraints. Instead of forcing cascading updates or deletions, nulls permit a level of flexibility, allowing for the maintenance of relationships without compromising the integrity of the database.<strong><br></strong></p><h3>Not all Nulls are Equal</h3><p>The biggest issue that can arise with null usage is not setting them correctly. Sometimes team can insert 'NA', '&nbsp;&nbsp; ', 'BLANK', or other strings to indicate an empty value. This will have serious consequences on data quality and database performance. As one of these examples is still a string - so it takes up storage and must be read explicitly by queries when searched. The largest mistake people make with numeric numbers is treating a value of zero as NULL - because these values are not the same. </p><p>Null numeric values of zero can skew computations and lead to misinterpretation in reporting. For example, a contract valued as NULL is a contract where the price has yet to be determined or is in negotiation. Whereas a contract with a value of zero means a contract is being completed free of charge or not for a monetary value. If both of these scenarios, were stored with a value of zero - you could see how that would lead to misinterpretation.<br></p><p>In conclusion, leveraging nulls strategically empowers technical teams to build robust and efficient database systems that not only store and retrieve data effectively but also maintain the integrity of relationships between tables. By embracing null values as valuable contributors to the database ecosystem, we can harness them to create more resilient and adaptable systems.</p><p><em>By Ellie Najewicz</em></p>

Null Values - A Whole Lot about Nothing

gray and black telescope on brown concrete surface near body of water during daytime

<p>Indexes are an indespensible tool in acheiving optimization in database retreval. Creating and maintaining indexes is an essential part of any database management role. Indexes are universal across all sorts of different databases - structured or unstructured. Let's explore what an index is, how it works, and best practices for managing them.</p><h3>Sorting Out your Indexes</h3><p><em>What is an index, really?</em> Most know that indexes improve performance, but few understand how indexes impact databases. An index is sorting logic applied to a specific column on a table to optimize the look up. In most cases an index aligns to the ‘WHERE’ part of a query. Essentially, an index is a sorted version of a column in question, so we can search that column in a faster way to achieve faster performance. Take the following example - lets say we were looking up rows where ‘CITY = Zebulon’ - in the list we have the query would search through the column in ascending order - so a total of 7 lookups. This is not optimized since it has to check every row, and if your record happens to be the last entry, the search will have to look through each row before successfully returning.<img id="xth6zm636ls0ffjup" src="https://cdn.durable.co/blocks/16acPK9rStmMMcxdDO8MNtsS1PlWVFifHZqezJk1DTno1P4xuBeEpC4GEziVwzl4.png" alt="" class="object-cover bg-gray-100" style="aspect-ratio: 3/2; object-position: undefined undefined;" data-corners="default" data-aspect="3:2" data-caption="" data-positionx="undefined" data-positiony="undefined" data-fullwidth="false" data-mce-src="https://cdn.durable.co/blocks/16acPK9rStmMMcxdDO8MNtsS1PlWVFifHZqezJk1DTno1P4xuBeEpC4GEziVwzl4.png" data-mce-style="aspect-ratio: 3/2; object-position: undefined undefined;"></p><p>Now lets say we knew that that CITY list was in alphabetical order. And since we know z is at the end of the alphabet we could do a much more efficient sort. Indexes default to a Binary Tree - or B-tree - sorting method (more about alternative sorting methods later in this pattern). With this method, we can search the list much more efficiently, finding Zebulon after only 4 lookups. You can see how such a pattern would drastically improve searching across millions or billions of rows.</p><figure id="figure-59vczpio1ls0fh2he"><img id="59vczpio1ls0fh2he" src="https://cdn.durable.co/blocks/261jAo5aWgRGZ8ev06EYokhMKKKdyJialAewLYSOhh5P07Xc9CxLKeOApGa1J68C.png" alt="Artist tools" class="object-cover bg-gray-100" style="aspect-ratio: 3/2; object-position: center center;" data-corners="default" data-aspect="3:2" data-caption="" data-positionx="undefined" data-positiony="undefined" data-fullwidth="false" data-mce-src="https://cdn.durable.co/blocks/261jAo5aWgRGZ8ev06EYokhMKKKdyJialAewLYSOhh5P07Xc9CxLKeOApGa1J68C.png" data-mce-style="aspect-ratio: 3/2; object-position: center center;"></figure><p>All an index really contains is a mapping of a columns actual order in a database to a sorted list. When there is a filter on that column, it can search the sorted list stated in the index more efficiently than searching the table itself. Indexes do all this as well without duplicating data or creating another physical table.</p><p>In a database there are two kinds of indexes: <strong>clustered</strong> and <strong>non-clustered</strong></p><p><strong>Clustered indexes</strong> are just those that are created by default when a table with a primary key is created. To create this index there is nothing you need to do beyond creating the table with a declared primary key.<br></p><p><strong>Un-clustered indexes</strong> are created as needed by database administrators or engineers to optimize a heavily used query for best read performance. These indexes are added to the table configuration of the column being optimized. Un-clustered index can refer to one or multiple columns with any sort method. Within non-clustered indexes there is a subcategory on multi-column indexes.</p><h3>Behind the Curtain</h3><p>Why don’t we make indexes on every column that is searched? Indexes or too many of them of course have drawbacks. Consider the following before building one:</p><p><strong>Impact on Writes -</strong> There is no free lunch - and the consequence of indexes is that it can slow down your write operations. When you add a new row to the database, any fields that belong to an index will need to be added and sorted according to that index. Every time a write is made to the database, the indexes are unusable until they have updated. Therefore, if the database is constantly receiving writes, then the indexes will never be usable and cause congestion in your database.</p><p><strong>Increased Maintenance -</strong> Indexes are another database object - like a view - that has to be maintained in the schema. When you migrate databases, you must make sure to copy over all indexes and continuously apply updates as needed. Indexes should be monitored that they are first still being used and secondly that they are providing a performance improvement.</p><p><strong>Challenge of Multi-column Indexes -</strong> While multi-column indexes are very powerful, they are difficult to build, maintain, and sometimes can impact the write performance. Single column indexes are more flexible, where as multi-column indexes will result in poor performance when they do not work.</p><h3>Adding Value to Everyday Operations<br></h3><p>The follow are the best situations to add indexes to your database operations where drawback will be minimized and the most value will be gained.<br></p><p><strong>Primary Keys -</strong> With clustered indexes, we should always have a unique index for our primary key. This will cover read optimizations for most basic look ups or counts on the table. This is one of the major reasons to declare a primary key, as the index is simply created by default along with the table with no additional work.</p><p><strong>High Volume Queries -</strong> When you have a large percent of reads from a table covered by the same query, then you have an opportunity to leverage an index. For example, if your table’s reads are accounted for by 30% from one particular query (maybe the query that loads the landing dashboard in an application) this would lend to a good place to add an index. As your database becomes larger and larger, the more likely you are to see benefits from indexing.</p><p><strong>Foreign Keys -</strong> Along similar lines for query performance, if you are doing consistent joins on a table, building an index on the defined foreign keys could improve your performance. If you have foreign keys in your tables that is frequently filtered or joined on with other tables, consider adding an index.</p><p><strong>Read Heavy Databases -</strong> Overall, indexing should be a large operation for any database that is read heavy or where read performance is a priority. If your database is in a situation where over 50% of operations are reads, then indexing should be constantly re-evaluated and part of regular data operations. By the same logic, if your database is very write heavy, then indexing should be less of a priority and may be more costly to maintain than it’s worth.</p><p>In conclusion, in the ecosystem of database objects, indexes play an important role to keeping the database running efficiently. By understanding the fundamentals, advantages, drawbacks, and best practices, you can harness the full potential of indexing to elelvate the performance of your database. </p><p><em>By Ellie Najewicz</em><br data-mce-bogus="1"></p>

Indexing - Mastering the 'Look Up'

<p>Metadata is quite underrated. However, it provides the blueprint for data
documentation, governance, and automated controls. Let's discuss what metadata
is, the value it has to an organization, and how to bring metadata into your
organization's standards.</p><h3>What is metadata and why should I care?</h3><p>Metadata is simply data about data - at a high level it indicates what the
data is supposed to represent, who created/updated/deleted a given piece of
data, and when this change occurred. Metadata exists around the data structure
which mostly defines what the data represents and any format rules it follows
(i.e. string of length 10 or double with two decimal points). Metadata is also
captured within each transaction which usually contains an audit trail for any
interactions in the database.</p><p>Metadata is the linchpin to keeping your database in a good state and ensure
high understandability across your data. Metadata provides the standards to
compare against to ensure data quality and are a key metric to monitor to
control data changes are as expected. You can imagine how without quality
metadata enforcing data governance and active data access monitoring would be
very challenging.</p><h3>Enhanced Searchability</h3><p>One of the clear benefits from metadata is improved searchability. Your
organization will know <em>what data exists where</em>. Sounds like a basic
thing you should know, right? As organizations grow it's a common issue to see
redundant data repositories appear and the trusted source of information can
become blurred. Not understanding exactly what data you have is a large organizational
challenge as well as a security and privacy risk. This can all be fixed with
accurate and up-to-date metadata documentation.</p><p>If you find yourself in this predicament, start with creating policies for
documenting metadata in a centralized catalog to identify redundancies and
gather an accurate inventory.</p><h3>Increased Collaboration</h3><p>With metadata, data and your database becomes less of a mystery and can
easily be understood by the entire development team. When there is
understanding of the data format and structure across the entire team,
development accelerates, and teams realize greater collaboration between
DBAs/data engineers and developers. Additionally, when trying to resolve bugs
that involve the database, more team members will be qualified to resolve if
the entire team has a basic understanding of the database behavior.</p><p>To achieve this kind of improvement, metadata documentation should be
up-to-date and accessible to the entire team. As an example, all members of a
development team should know the following:</p><p>- How is one record in the database stored?</p><p>- How to know which user made what changes in the database?</p><p>- How are records soft or hard deleted from the database?</p><p>While in reality, teams practice separation of duties and no developer would
ever have access to production data, it is important team members have a basic
understanding of the data for better quality software.</p><h3>Governance Foundation</h3><p>Metadata will also be the building block of any governance strategy. Data
governance is the practice of classifying and regulating data based off of
those classifications. The most common area of governance is around privacy or
personal information (PI). It is essential to know where PI is in your data
and that it is tracked, protected, and accessed in an established manner.
Understanding what classification your data falls under all depends on accurate
and available metadata. </p><p>Metadata on individual datasets will be what is scanned or controlled for
data governance. Not only is a database more maintainable with good metadata
documentation, but it’s also a necessity for compliance and automated controls.
If teams want to automate any governance activity, a sound metadata
documentation strategy must be established first for success.&nbsp;</p><p>Overall, metadata is something that is only going to become more important
as data is an essential building block for our systems and AI. Data with
quality metadata tagging will be highly valued in the future as we require more
transparency and accuracy.&nbsp;</p><p><em>By Ellie Najewicz</em></p>

The Role of Metadata in Data Organization

<p>Tis the season to make wish lists - after completing my Certified in Data Protection (CDP) learning, I wanted to summarize my main takeaways. We know security is important and data protection is at the heart of cybersecurity. &nbsp;As we navigate the complexities of the digital age, certain must-haves emerge as cornerstones for building a resilient fortress against cyber threats. Let's delve into the essential components that constitute the blueprint for data security excellence.</p><h3>Know your Data</h3><p>Before fortifying your defenses, it's crucial to know what you're protecting. First you should establish a comprehensive inventory of your data assets. Then categorize and classify information based on sensitivity and importance. By understanding the landscape of your data, you can lay the foundation for targeted security measures.</p><h3>Guarding the Gates</h3><p>Access control is the gatekeeper of your digital information. Implement stringent access policies that grant permissions based on roles and responsibilities. Make sure to lean on the principle of least privilege and separation to duties when building out access roles.&nbsp;Regularly review and update access privileges, ensuring that only authorized personnel have entry to sensitive data. This not only mitigates the risk of insider threats but also safeguards against unauthorized external access.</p><h3>Shielding Your Secrets</h3><p>In the age of cyber espionage, properly implemented encryption is the foundation for shielding your data. Employ end-to-end encryption for data both in transit and at rest. This transforms your information into an unreadable code, even if intercepted. Encryption is not merely a safeguard; it's an insurance policy against data breaches.</p><h3>Be prepared for Disaster<br></h3><p>Data security isn't just about preventing unauthorized access; it's also about ensuring the availability of your information. Implement high-availability solutions to guarantee uninterrupted access to critical data, even in the face of unforeseen challenges such as hardware failures or cyber-attacks. Redundancy and failover mechanisms become your allies in maintaining seamless operations.</p><h3>Vigilantly Monitor <br></h3><p> A proactive defense is an effective defense. Regularly audit and monitor your systems for any anomalies or unauthorized activities. Implement intrusion detection systems and log analysis tools to promptly identify and respond to potential security threats. Vigilance is key in staying one step ahead of evolving cyber risks.In conclusion, data security must-haves are the foundation of a resilient defense strategy. </p><p>By creating a thorough inventory, implementing robust access controls, embracing encryption, and ensuring high availability, you fortify your data against an ever-evolving array of cyber threats. In the dynamic landscape of data security, these essentials serve as the guardians of your most precious asset—information.</p><p><em>By Ellie Najewicz</em></p>

Data Security Must Haves

<p>The transition from a relational database to a NoSQL database marks not just a technological shift, but a change in mindset. Let's explore how embracing NoSQL transforms the way we think about data and the processes they support.</p><h3>Increased Flexibility</h3><p>Relational databases thrive on structured schemas, imposing constraints around data storage. This comes from when databases were the main control layer for data quality - now we have UIs and APIs to ensure data quality before it hits the database. NoSQL databases, however, break free from these constraints. With dynamic and table-less structures, NoSQL accommodates diverse and evolving data models, allowing the flexibility to add in controls only when needed. NoSQL will force our software to align to logical and simple structures that align to events.</p><h3>Closer collaboration across database and software development</h3><p>NoSQL's flexibility extends beyond data structures to development processes. Now that agile methodologies are standard, NoSQL databases align seamlessly with the principles of rapid iteration and flexibility. Developers can adapt to changing requirements without the need for extensive schema migrations, fostering a more agile and responsive development environment. Additionally, NoSQL structure easily aligns to how software is written. With NoSQL, information can be organized together whereas in a relational database, data may be distributed across many tables for one event. As a bonus, NoSQL databases are very developer friendly.</p><h3>Beyond tuple-structured data<br></h3><p>For many years, when we thought of data, we would think of an excel spread sheet. This led to data being held in tables or relational databases. Now, we have a much more diverse set of data - rich text, images, audio, video, etc. And NoSQL databases will be essential to store and make this type of information accessible. By using NoSQL, teams will be able to better leverage unstructured data and see how structured data could be combined with unstructured data.</p><h3>Will NoSQL replace SQL?<br></h3><p>Probably not. We will continue have a mix of relational and NoSQL data. Especially with the rise of AI, we will need to store more unstructured text data than we have in the past. NoSQL introduces specialized database models like document stores and graph databases, each tailored to specific types of data relationships. Document stores, such as MongoDB, DynamoDB, and Apache Cassandra, excel in handling semi-structured data, while graph databases, like Neo4j, excel in capturing complex relationships.</p><p>In conclusion, the transition from a relational to a NoSQL database is not merely a change in technology but a shift in mindset. Adopting NoSQL opens the door to flexibility, scalability, and agility take center stage. As we navigate this shift in thinking, the database becomes not just a storage solution but a dynamic and adaptive partner in the ever-evolving landscape of modern data management.</p><p><em>By Ellie Najewicz</em></p><p><br></p>