Setting up a NAS

[jkim05]

Originally Posted by 357

Yes RAID 1 (mirroring) is a good idea. It provides quick, cheap, reliable redundancy. Offsite storage is really more for disaster recovery, aka building burns down and the company has to rebuild.

Also, I have worked for a regional hospital (medical group of 7 or 8 hospitals) and you DO have sensitive data. HIPPA requires you to protect that data or YOU (not your company/employer) can be sued or heavily fined. Even names/addresses can be considered patient data. DO NOT neglect your responsibility to protect it. I would highly recommend that you use some form of encryption. Even if it is a freebie like PGP, it's better than nothing. Most new external hard drives offer it as a feature if you go that route.

If you use encryption and it gets cracked at least you made the effort. That will usually prevent legal action against you or your company. If you do not make the effort, you are at risk should that data get compromised.

Ok, I guess that is something to consider. As far as I know, as long as data is not stored or transmitted off-site or across a network encryption was not necessary. Basically since all the computers are locked up inside of the office, the office as a whole complies with HIPAA. I could be totally wrong though. In any case I guess there is no reason not to encrypt data, so I might as well.