Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.