Securing a document management system

[Theresa Rowe <rowe () OAKLAND EDU>]

I'd like to check the collective wisdom of the group on this project:

We are implementing a document management system (EMC, Documentum).   The
documents are stored as JPEGs in the system.   We've learned that our
community expects to store items that would be classified as personally
identifiable information under our state law.  This includes copies of:

drivers licenses
social security cards
court ordered name changes such as divorce decrees
tax returns with social security numbers

Obviously this needs a high standard of security.  I read that there are
tools out there that encrypt JPEGs (jpegguard).  Has anyone found or used a
tool for a system like this?

Have you implemented such a system?  What security safeguards have you put
in place?

--
Theresa Rowe
Chief Information Officer
Oakland University