Data-protection products should support both data-masking and encryption technologies, Dataguise said. Organizations also can choose point products for each remediation technique, but it can be a challenge if the implementation involves keeping both masked and unmasked versions of sensitive data in separate Hadoop directories. Data masking obscures sensitive data elements within data stores with false information, but keeps it meaningful for the application logic. For accuracy, masking must be consistent across all data files. Determine whether business analytic needs require access to real data or if desensitized data can be used, Dataguise said.