TMA-PRINTER-JOB-RETENTION
Ensure stored print jobs are PIN-protected and automatically deleted
Description
Retained/stored jobs, scan-to-box documents and fax mailboxes can be reprinted or downloaded by anyone at the device or on the EWS. Require PIN/secure release and delete jobs automatically after a short period.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Copy/Print > Job Storage (HP: Retrieve from Device Memory / Job Storage Settings; Xerox: Secure Print / Saved Jobs; Ricoh: Stored Documents / Locked Print): stored/private jobs require a PIN or authenticated pull-print release; 'Temporary job retention' / auto-delete of stored and secure jobs is set (e.g. 4 hours or less, held jobs deleted at power off); scan/fax mailboxes are password protected; job history on the EWS hides document names from non-admins.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
EWS: enable secure (PIN) or authenticated pull print, set stored-job auto-delete to the shortest workable period, password-protect document boxes and fax mailboxes, and hide job names in job logs from non-administrators.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- printerjob-retentionconfidentiality
- Référence
- CIS Multi-Function Device Benchmark v1.0.0 - Job storage and retention (verify section number for your release)