Common Tasks

Protecting database fields is the primary purpose of CS:Govern.  Fundamentally, column value protection involves encrypting the data and storing it in a parallel storage table to the Salesforce object table, applying a masked value to the Salesforce object table field values, and assigning privileges to view unencrypted values.

From time to time the CS:Govern administrative user may elect to remove the data protection on a set of previously Governed fields.  Although this may be a rare case, CS:Govern can just as easily remove protection as it can enable protection.

Rotation of encryption keys adds a layer of data protection which the CS:Govern administrative user may perform on as fine grained a schedule as meets their needs.  Upon rotating these keys, any insert or update of existing fields in the CopyStorm database will immediately being to encrypt the values using those new keys.

Although CS:Govern comes, out-of-the-box with a set of Compliance Categories that map to those defined in Salesforce, the CS:Govern administrative user is always free to define custom Compliance Categories which are then used exactly the same as any other.

Depending upon the number and complexity of the CS:Govern rules that have been defined, there can be several steps and a good amount of mouse clicks to create the database Governance rules (which fields of which Salesforce objects are to be Governed, which masking rule is assigned to each field of each object, and which Compliance Categories are assigned to those fields.)  From time to time it may be desirable to re-generate that exact set onto another database (perhaps some second CopyStorm database.)  The CS:Govern export feature makes this task easier.