Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

VisokaNivo 1Ručni pregledprinter

Opis

Printer hard disks and flash keep copies of printed, scanned, copied and faxed documents. Storage encryption plus immediate image overwrite protects data at rest; a secure (cryptographic or DoD-style) erase is required before resale, return or disposal.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.

Svojstva

Operativni sistemi: Bilo koji
Oznake: printerdata-at-restsanitisation
Referenca: CIS Multi-Function Device Benchmark v1.0.0 - Storage encryption and secure erase (verify section number for your release)