How to maintain your company information security when using Talend ETL ?
We know all that the ETL is connected to all the company systems , any security failure can be fatal for your company.
Here are some best practices to use :
- Use encryption of passwords.
- Use SSL certificate when using TAC
- Create Talend user with limited permissions on unix server ( never give root )
- Block connection ( In/Out ) from outside network to your TAC
- Use different ports than the defaults one.
In details :
1- First thing : Install TAC under SSL certificat and block access from outside your network ( or allow only VPN access )
2-Never leave admin@talend.com user activated on the TAC , I have worked in many big customers projects , this seems to be the first test failure .
3- Use different SVN user , don’t the defaults one, make the passwords stong enough.
4- Passwords encryption for environments,
Talend is used to interact with different applications in your system information , some of them might be sensible , there are different ways to protect this passwords even from your developers and create levels of access ( please contact us for more info )
5- Create only one administrator or one team for the administration and the monitoring of your jobs in production environment ( different fron the dev team ) where this admin ( or team ) will be in charge of all deployments , modifications , scheduling .. etc but not developments, this make an effective way of running jobs.
For more information please contact us : contact@talendexpert.com
if you need more information about how to secure your company information when using an ETL , please contact us : contact@talendexpert.com