Keeping sensitive information off of PC/Mac

[kalel29x]

Hi,

I am new to the forum.

I am working with a small investment company that happens to be situated have sensitive data on their computers. It is a subsidiary company that has very sensitive data such as government contracts, contracts involving large amounts.

The problem we are having is we are in a relatively very corrupt country in Africa and an incident last week prompted us to look hard at security.

Someone had bribed Law enforcement officials to come to my apartment and harass myself and my wife. They took my laptop which had very sensitive data on it and were looking through things that had nothing to do with the case. They later attempted to post personal photos in an attempt to discredit me. I currently have an agreement with a swiss data centre to provide me with hosting for email and potential cloud services in future. but I am now thinking to remove all data on my machine and keep most of it in the cloud.

Can anyone give me advice on how to tackle this problem?

[Ewald Horn]

Hi.

Even while using a cloud solution, you will have some data on your machine that is sensitive.

The best approach, even with a cloud host, is to encrypt your hard drive. Under Windows, you can use something like Check Point (http://www.checkpoint.com/products/full-disk-encryption/index.html) that will encrypt the entire drive.

I know there's a program called TrueCrypt, and it works very well, but I have found it's cumbersome to use and because it's not transparent, people don't bother to keep all their sensitive information in the TrueCrypt vault.

For Linux, you can set up an encrypted file system (Fedora 19, for example, ships with this built-in).

The best security you can have though, is to be diligent. Make sure you lock your computing device when not near it. Make sure you delete all sensitive data that you do not absolutely need. Also, ensure you do not place anything sensitive on an unencrypted device.

I hope this helps.

[rch1231]

Ewald has a good idea and TrueCrypt will encrypt you whole drive and can be set so that the computer will not boot with out the password. Or as a separate option you could carry a USB drive that was encrypted with encryption software but people get lazy about having to put in a USB drive and the password before they save a document to doing the whole drive is safest.

[NodePacket]

You can encrypt folders and hide them or use cloud storage. I have heard good PGP key protected emails also works great.

[kalel29x]

hello gents,

do these softwares work on mac?

[rch1231]

Truecrypt works with Windows, MAC and Linux

[kalel29x]

thanks