Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

YüksekDüzey 1Manuel incelemeprinter

Açıklama

Printer hard disks and flash keep copies of printed, scanned, copied and faxed documents. Storage encryption plus immediate image overwrite protects data at rest; a secure (cryptographic or DoD-style) erase is required before resale, return or disposal.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: printerdata-at-restsanitisation
Referans: CIS Multi-Function Device Benchmark v1.0.0 - Storage encryption and secure erase (verify section number for your release)