I have a question regarding data security.
I have an application that dumps a flat Excel file on a Windows server from an SAP database. The file is edited, then the application writes the edited data back to SAP transactionally.
While under normal usage, this application will not have any PCI or PII, but the database that it dumps from does contain PII, and it is possible that someone with malicious intent could steal that data.
My question is, what is the best way to ensure that the Excel file is secured completely on that server?
I do not have access or capability to change the nature of any other part of the process, so I just want to make sure that the Excel data can go nowhere.
I was thinking...
- Disallow shares and mounts
- Place server in Enclave
- Lockdown users
- Encrypt data share with BitLocker
Any other thoughts? Something I'm missing?