Help-desk staff verifying a resident on the city portal should see…

Question

Help-desk staff verifying a resident on the city portal should see only the last four digits of the SSN on identity screens, not the full number. Where should that control be enforced for the UI?

Accepted Answer

By applying application-level masking in the presentation layer so responses show a masked SSN (for example, --1234) — The help desk needs a peek at the last four, not the whole vault combination on screen. Mask in the app UI — show --1234 — instead of shipping full SSNs to browsers or inboxes.

Answer

By disabling HTTPS so intermediaries can truncate SSNs in transit for display

Answer

By storing only the last four in KMS ciphertext and discarding the real SSN forever before enrollment completes

Answer

By emailing full SSNs to agents and asking them to remember only four digits mentally

Help-desk staff verifying a resident on the city portal should see only the last four digits of the SSN on identity screens, not the full number. Where should that control be enforced for the UI?

Short Explanation

Full Explanation