Secure Scan to Share Locations

MediumLevel 1Manual reviewprinter

Description

Multi-Function Devices often support placing scans on a remote file share. It is recommended that access to these file shares be restricted. Limiting access to these file shares will help protect the confidentiality of scanned data by reducing the probability of an unauthorized individual accessing that data while it is stored on the file share. Appendix A: References 1. Defense Information Systems Agency (2009). Multi-Function Device (MFD) and Printer Checklist for Sharing Peripherals Across the Network. Available: http://iase.disa.mil/stigs/checklist/span_mfd_checklist_v1r1-3_04_15_2009.pdf. Last accessed 22 April 2009. 2. Hewlett Packard (2009). Secure imaging and printing. Available: http://h71028.www7.hp.com/enterprise/cache/617605-0-0-225-121.html. Last accessed: 10 April 2009 3. PC World (2005). Multi-Function Devices. Available: http://www.pcworld.idg.com.au/article/173242/mul...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 7.2.1: Secure Scan to Share Locations.

How it is fixed

Fix method: Guidance or infrastructure patch

Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 7.2.1 to configure: Secure Scan to Share Locations.

Properties

Operating systems: Any
Tags: mfdprinter
Reference: CIS Multi-Function Device Benchmark v1.0.0 - 7.2.1 Secure Scan to Share Locations