This one is so far out of my comfort zone that we'll likely have to hire a consultant, but I thought I'd ask:
Since we're a medical clinic, and we have a database, we need to encrypt this thing. We're running MS-SQL, so I've read about TDE, and we have the proper licensing for this.
What I don't understand is how this affects backups, or our BackupExec system. If we enable TDE, what do we need to do for our replication site? How much extra CPU will this cost (I've seen estimates from 3-30% higher CPU usage)?
Is there something else we need to look at, other than TDE? We're running an EMC SAN, is there a way to encrypt a datastore in that?