I am currently working on a web application that requires W-9 file submissions. Currently we are storing these on a designated file system, but since these forms can contain SSN I would like to know what is the standard approach to securing these kinds of files.I saw this question but it doesn't quite apply to my situation as we will still need access to these files.

I've thought about encrypting the files and keeping the decryption key in another location, but would like to know how infosec experts handle this problem.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.