Re: [GENERAL] Securing Information

2016-12-28 Thread jesusthefrog
True. In our environment we have other layers to deal with network security which covers us for encryption of a data as it's transmitted, and you definitely should do that, but that's not something a DBA would normally be concerned with. And given that he said that the machine may be standalone, I

Re: [GENERAL] Securing Information

2016-12-28 Thread John R Pierce
On 12/28/2016 4:16 PM, jesusthefrog wrote: If you're storing HIPAA data and/or PII then just make sure it's encrypted at rest. We just did this at my workplace by using full disk encryption on the disk which stores the DB files. That may not be the best solution, but it appears to work well e

Re: [GENERAL] Securing Information

2016-12-28 Thread jesusthefrog
If you're storing HIPAA data and/or PII then just make sure it's encrypted at rest. We just did this at my workplace by using full disk encryption on the disk which stores the DB files. That may not be the best solution, but it appears to work well enough. -- -BEGIN GEEK CODE BLOCK- Ver

Re: [GENERAL] Securing Information

2016-12-28 Thread Adrian Klaver
On 12/27/2016 11:59 AM, Chris Weekes wrote: Hello Sir or Madam: I wanted to install PostgreSQL v 9.6 on a machine that may stand alone and or be part of a network sharing hospital data. I was wondering what steps if any need to be taken to ensure that the patient and operational data is secure

Re: [GENERAL] Securing Information

2016-12-28 Thread Melvin Davidson
On Wed, Dec 28, 2016 at 11:49 AM, Rich Shepard wrote: > On Tue, 27 Dec 2016, Chris Weekes wrote: > > I was wondering what steps if any need to be taken to ensure that the >> patient and operational data is secure on a machine and or across the >> network. >> > > Chris, > > I'm far from an exper

Re: [GENERAL] Securing Information

2016-12-28 Thread Rich Shepard
On Tue, 27 Dec 2016, Chris Weekes wrote: I was wondering what steps if any need to be taken to ensure that the patient and operational data is secure on a machine and or across the network. Chris, I'm far from an expert but until more knowledgeable folks respond I'll offer a couple of quick