The security provided by strong access controls is further enhanced by the use of encryption. However, when you use encryption, you must still dispose of unencrypted versions of the data that existed prior to encryption being performed that remain after decrypting that is used in the encryption process Note that this recommendation pertains only to encryption of files stored on the computer itself. Encryption of information for transmission over a network is a separate issue that is not within the scope of this practice. Your organization's security policy for networked systems should specify access privileges and controls for the information that will be stored on computers how access to files that have been encrypted with a user key is performed. This is very important when that user no longer works for your organization.
Some operating systems provide more than one file system with different access control capabilities.
It is important to choose the file system that best meets your needs for file access control. Your decision may affect the low-level formatting of storage devices and thus should be made early in the process of configuring the operating system. Copyright 2000 Carnegie Mellon University. See the conditions for use, disclaimers, and copyright information. This page was last updated on June 12, 2000.