If you're not taking your printer security seriously, someone else might be, maybe even The Wolf
Security is definitely one of the hottest topics amongst business owners at the moment, and it is becoming very difficult to avoid the subject when looking at any media source at the moment.
IT Departments are wrestling with the number of networked devices that are now connected, and the fact that many of their knowledge workers are now demanding 24/7 access to information, which means that content needs to move freely from both inside and outside the corporate firewall.
Which of course increases the Security risk.
Our policy is to secure the Device, Secure the Data and then finally the Document.
Interestingly, it has now become widely accepted that Security Breaches are an inevitable fact of life.
"Most companies fit in to two categories those that have been breached, and those that don't know that they have been breached"
EU - General Data Protection Regulation (GDPR)
When you combine these concerns with the new EU GDPR (General Data Protection Regulation) that was introduced on the 25th May 2018.
Which state that companies are now mandated to report Security breaches within 72 hours of becoming aware, whereas under the current rules it is not a mandatory requirement for a non Public Sector organisation to report any breaches.
If you go to the Information Commissioners Office (ICO) website, you will see that they have already fined a lot of organisations in recent years, but moving forward the fines will be more punitive, with organisations that are guilty of more serious breaches being fined up to €20 million or 4 percent of global turnover, whichever is greater.
Just to put this into perspective, one company who was fined £400k could have been fined as much as £59m under the new regulation. You can see why it has the highest level of priority and focus in a lot of organisations.
What Does This Have To Do With Printers / MFP'S
In our experience, most companies we have spoken to have a plan to mitigate the risk of a breach, but one thing that almost everyone has failed to incorporate into the plan is the office printer and multi-function device. This is concerning, as the MFD is no longer the analogue copier that it used to be, since the turn of the century it has evolved into an intelligent business processing hub that serves as an on- and off-ramp to business information, whether it is stored in the device, on the corporate network, on paper, or in the cloud.
In fact, if you look at the anatomy of a modern Multi-function Device it has the same characteristics as a PC.
Here are the common Imaging and Printing vulnerability points from a Security perspective.
So, the big question is why isn’t it treated in exactly the same way as a PC?
We believe that this is because most of the manufacturers in the print/copier industry do not have an IT heritage and have therefore not invested heavily enough in Security solutions.
The one exception is Hewlett Packard, who have been very focused on this area for quite a few years now and have integrated many similar security features to the ones that can be found in their PC's, turning them into ‘The worlds Most Secure Printer'
Three key technology features take security to the next level on the device itself:
HP has been named a leader in the first IDC MarketScape report on WW Security Solutions and Services Hardcopy 2017 Vendor Assessment:
“HP Inc. has an advantage with its strong IT services and capabilities, enabling scalability and integration in the workflow arena, providing consistency in the technology stack, and facilitating a comprehensive and integrated security strategy across the entire IT infrastructure.”
“HP Inc.’s approach to security takes the entire print and document infrastructure into account, beginning with locking down the device and extending into all aspects of device usage and content protection.”
Sure Start validates the integrity of the BIOS code.
Whitelisting ensures only authentic, known-good HP code is loaded into memory
Run-time Intrusion detection detects anomalies during complex firmware and memory operations.
Each feature automatically triggers a reboot if attacked.
Then at a group or fleet level we have JetAdvantage Security Manager which automatically assesses and, if necessary, remediates device security settings to comply with pre-established company policies.
This is proving very popular with large companies who are incorporating them into their overall Security Policy as part of their GDPR compliance.
Kudos also have access to the HP Security Advisory Service, who can help with more complex requirements. This team come from the world of cyber and information security, so they know how print security should integrate with the overall corporate Security Strategy and can advise you accordingly.
I know what you are thinking, that's great for a corporate, but what about me and my SME business?
Well, the good news is HP have given Kudos access to these same tools for SME's, the even better news is that they have made them very inexpensive, to the point that it would be viable for a company that only has two or three devices.
Kudos are currently offering free Print Security Assessments and Advice to local organisations, if you would like to take us up on this offer please do not hesitate to contact us.
HP JetAdvantage Security Solutions
Safeguard sensitive information as it moves through your business. Robust, fleet‑wide JetAdvantage solutions help protect data and documents, control user access, and enforce printing policies across your organisation.
JetAdvantage Security Manager
Take control of your fleet, improve compliance, and streamline security monitoring and management. Easily secure new and existing devices across your organisation with the industry’s first policy‑based imaging and printing compliance solution.
Make your printing environment more secure and efficient. Access Control Printing Solutions make it easy to control user access and collect data to help transform printing practices—help reduce costs and eliminate unclaimed documents.
JetAdvantage Private Printing
HP JetAdvantage Private Print enables you to securely store print jobs, and then print via secure authentication—right at the device. This cloud-based printing feature can help reduce wasted and misplaced prints, keep information more secure, and store documents until you are ready to print them.
JetAdvantage Secure Print
Increase security and control of your print environment by releasing documents only to authorised users with HP JetAdvantage Secure Print.7 This cloud-based solution holds print jobs in a protected queue until users are authenticated. Unprinted jobs are automatically deleted based on your company’s expiration policy.
Proximity Card Readers
Help protect your company’s confidential information and control printing access by requiring users to authenticate at imaging and printing devices with their existing proximity cards. Proximity Card Readers offer support for multiple card formats in a single card reader.
Nuance SafeCom Security and Job Accounting solution
Optimise equipment, heighten security, and simplify IT tasks. This suite of scalable solutions helps manage and seamlessly track print costs, enforce policies, and deliver print jobs to the right hands.
Nuance Equitrac Security and Job Accounting solution
Equitrac intelligent print management software makes printing work the way you want it to: simply, securely, and with maximum savings at every step. One click for any print job and any printer. No worries about print servers, compatible print drivers, or whether the printer is ready. Complete accountability to better control costs and security.
TROY cheque printing
Enhance security with distributed, on-demand check printing. Help prevent check fraud using tamper-evident security innovations—including specialty toners, hardware, and management tools.
TROY document printing
Keep high-value security documents from falling into the wrong hands. Print securely on pre-printed paper, when and where you need to. Deploy a solution that helps meet compliance for fraud prevention and auditing.
Trusted Platform Module
Strengthens protection of encrypted credentials and data stored on your printer or MFP.