basic security question

[drashish]

Hello,
I run a small doctors office. All our informtaiton is electronic (full paperless) via a 3 pc+ 2 wireless tablets server based network. We have dedicated 1 folder on a backup pc to be teh "network drive" where all files are stored. However, I want to secure that folder. I'm not sure how to do it. I've heard about encrption and also password lock such as

http://www.winability.com/folderguard/

Which is the most practical? Is encrption overkill? Will encrption require client keys? I intend on having a hotspot setup in the office for waiting patients who want to also use the internet connection.

Kindly,
Signature Medicine

 

[Ed2020]

By far my favourite encryption software is TrueCrypt. It's free, open source and about as secure as you can get. Also very easy to use.

Is encryption overkill? If any of the information you are storing pertains to patients or finances then no, not at all in my opinion.

Ed Metcalfe.

Please do not feed the trolls.....

 

[drashish]

How does encrption work? I've avoided it since I never understood how to set it up. Does everyone need a key? How can set it up so that it automatically opens the folder, encrpyts it, and locks it each time I transfer a new report. Will it slow down my data transfer>

 

[Ed2020]

The way encryption works will change dependant on which encryption method you use.

For TrueCrypt I suggest you do some reading up on

http://www.truecrypt.org

- the information posted there will answer all of your questions and certainly provide better answers than I could.

All users would need the password and any number of optional key files to open the encrypted container.

There is a performance impact but you can choose the encryption algorithm according to the performance hit you are prepared to take. In my experience even the slowest algorithm is more than quick enough.

Ed Metcalfe.

Please do not feed the trolls.....

 

[brianinms]

If you want to setup a hotspot for patients then you should get a second internet connection just for them. Never put guest internet access on your own network. Did I mention never ever?

In addition I would get a low end server and configure it properly instead of setting up a network share on a workstation. In addition I would make a plan for an offsite backup.

 

[needcoffee]

drasish,

Is this office in the US? Patient info in the US falls under HIPAA and your current security measures fall short of the regulation. Opening a hotspot would cause further violations unless you use a separate network and internet connection.

needcoffee

 

[pankajmhatre]

If your are using Windows XP/2003 and above the better option is t use Microsoft Privet Folder...and its free too.