Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

높음레벨 1수동 검토printer

설명

Printer hard disks and flash keep copies of printed, scanned, copied and faxed documents. Storage encryption plus immediate image overwrite protects data at rest; a secure (cryptographic or DoD-style) erase is required before resale, return or disposal.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

조치 방법

조치 방식: 가이드 또는 인프라 패치

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.

속성

운영 체제: 모두
태그: printerdata-at-restsanitisation
참고 자료: CIS Multi-Function Device Benchmark v1.0.0 - Storage encryption and secure erase (verify section number for your release)