Storage of Sensitive Data to External Hard Drive

Posted on 2007-08-06
Last Modified: 2013-11-14
We've got a regularly updated database in MySQL that contains sensitve data (somewhat de-personalized medical data that is being statistically analyzed).  The database lives on a secure server in a locked server room.  I'm confident the Sys Admin has properly and thoroughly limited access via internet (data may only be posted) and intranet.  The challenge now is backing up this data securely.

Our sys admin has recommended an external hard drive hanging off my system in my locked office.  This would provide us with physical isolation from the server room and relative physical security of the backup device.  The question then becomes how to further secure the external HD - I guess there are devices which have built in user access control, and we could also just get a common device and load some sort of access control or encrypting software.

This doesn't have to keep out the NSA, or even really good hackers (none of whom would likely care about this stuff anyway).  We just need to demonstrate to the people allowing us access to this data that we are taking every reasonable precaution to protect their data and that their trust in us is justified..

Btw, this being an academic project, the budget is limited to certainly no more than $500 for a solution - probably $300 would fly well.

Suggestions, please?
Question by:Purdue_Pete
    LVL 87

    Accepted Solution

    Most backup software will allow you to password protect the backup. You can of course also use encryption to encrypt your disk, just make sure you have saved the encryption and decryption keys so that you can restore that backup in case of disaster.
    LVL 32

    Assisted Solution

    Also have a look at Truecrypt:
    LVL 32

    Expert Comment

    Thanks and good luck.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    The Samsung SSD 840 EVO and 840 EVO mSATA have a well-known problem with a drop in read performance. I first learned about this in an interesting thread here at Experts Exchange:…
    In this article we have discussed the manual scenarios to recover data from Windows 10 through some backup and recovery tools which are offered by it.
    This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
    This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now