As you'll no doubt work out, I'm not an IT professional. My job is working for the family business, but being small I do all our computing stuff.
We have some specialised software which only works under Windows, and handle confidential data, so it's always been heavily encrypted on a seperate computer with no physical connection to the Internet. Backups are made onto Truecrypt containers onto several USB flash drives which are stored offsite and periodically copied to cloud storage. Traditionally, we've had a procession of old PCs to do this, but our most recent one is starting to look a bit wobbly.
It's all backed up, of course, I can replace it all easily enough, but I was thinking. What if I put a copy of Windows on a partition on our web/email laptop(running Mint, 'natch), encrypted the partition with Truecrypt(unless you could suggest something better), and have it dual-boot at startup? There's nothing that can be done to the Windows partition (except deletion), is there? Or have I missed something?
Before you ask, Wine is not an option with our software. I know my proposed solution is rather inelegant and I'd love to ditch Windows, but there is no other way.