Summary

---

HP Secure Print Analysis

Summary HP Test Test your recommendations Because today's multifunction printers can do so much more than just print, it's important to protect your printer fleet the same way you protect other endpoints like PCs. The following summary provides a checklist that shows both the policies your organization has implemented as well as additional opportunities to minimize the risk of a breach.

Device Fundamental security practices Encrypted storage with secure erase Hard drive encryption is highly recommended to prevent the theft of information stored on the printer's hard drive

Secure disposal It is critical to erase or destroy printer hard drive data before the printer is taken for disposal

Secure printer repair access Knowing the security practices of printer maintenance vendors will help protect sensitive data

Physical security (locks) Locking input trays help prevent theft of sensitive paper such as prescription or check stock such as prescription or check stock

Administrator access control for device It is recommended that only IT staff or other authorized personnel be allowed to set up and configure printer settings

Whitelisting of firmware code Whitelist trusted applications (like printer firmware code) to increase security while protecting your fleet from potential malware

Advanced security practices BIOS Integrity Check printer firmware, validate firmware version and (in the event of malware detection) reboot from last known safe settings

Intrusion detection Monitor your network devices for intruders and noncompliance

Common criteria certification Use this international standard to check the authenticity of software on the printers on your network

Network data Fundamental security practices 802.1x or IPsec network standards Applying these standards allows you to encrypt data in transit to and from printers

Encrypted print driver Encrypting data in transit makes files nearly impossible to read if intercepted

Firewall protection Prevent malware and viruses from entering your network by limiting printer access to computing devices in network

Advanced security practices Apply digital certificates to printers Fleet management tools can allow you to automatically apply digital certificates to network printers and multifunction printers

Access control & authentication Fundamental security practices PIN/LDAP/Kerberos User authentication controls are effective ways to prevent sensitive documents from falling into the wrong hands

Role based access control Help reduce costs and security risks through printer feature restrictions, such as limits on who can fax, scan to email or scan to fax

Advanced security practices Authenticate to use the device via passwords, biometrics, Proximity Cards, etc. Methods such as passphrase, PIN, LDAP authentication, proximity cards and biometric access controls are effective ways to restrict access to sensitive documents

User authentication and tracking of printed jobs from all devices, including mobile User authentication solutions can track all printing activities and help ensure compliance to corporate security standards

Mobile devices included in network access Utilize your mobile devices as part of your overall print security policy for printer access control

Monitoring & management Fundamental security practices Updating devices with latest firmware/OS A printer fleet security management tool ensures devices are up to date with the latest device protection and security features

Advanced security practices Auto-configure new print devices when added to the network Automatically apply and maintain digital certificates to network printers and multifunction printers

SIEM software to detect and document threats Security intelligence and event management (SIEM) software allows you to detect and resolve printer security alerts

Outside security consultation or management A support team of consultants can show you how to improve the security of your data, devices, and documents

Document Fundamental security practices Control access to preprinted forms, including checks, prescriptions, etc. Restrict certain printer features by user or department

End-to-end encrypted printing Protect data as it travels across your network

Option for PIN or Pull printing for sensitive information Users can opt in to pull printing, reducing both the reliance on personal printers as well as the risk of print jobs falling into the wrong hands

Advanced security practices Required pull print for any print job Help eliminate unclaimed print jobs in addition to ensuring printed documents are protected

MICR, watermarks or other features to prevent copying or modification Multifunction printers can embed fraud protection into documents