Classify all data according to confidentiality and sensitivity. Considered implementing encryption software to protect confidential or sensitive data stored on the server or a workstation, or data being transmitted over the network. Encryption software protects data by making it unreadable.
Encryption software uses an algorithm to scramble data.
Only a person with the appropriate encryption key and descramble the data to make it readable. Make sure that the same controls implemented to protect confidential or sensitive data stored and or processed on the LAN are also implemented for removable media, such as backup tapes and diskettes. When files containing confidential or sensitive data are deleted, make suere that the same files are deleted from backup copies, including backup media. The delete and erase commands in DOS do not actually deleted files, they just alter the reference to the file from directories. Therefore, utilities such as PC Tools and Norton Utilities can be used to access deleted files.