As it is Windows you could run bitlocker as it is coming with the professional license. This wil encrypt harddisks a mitigation for the physical attacks. You need a third party tool with Unix for this. It wil not protect any data for abuse by admins eg with their backup/dr operations. - SAS datasets can be encrypted using SAS AES is possible wiht 9.4. That will mitiaget sensitive data in sas type datasets. - The temporaries (work/util) should be emptied cleaned. Having those in backup or DR is not very smart. - Any data access at OS level should be monitored when it is highly sensitive. Should be no issue as a standard mititagation. Wiht those acttions the need for a third party tool encrypting data on personal access is less necessary.
... View more
