It will be shocking information once you watch this video that a hacker can retrieve all the documents scanned, copied and faxed from high-end multifunction copiers. The news says from 2002 such multi-function copiers are shipped with a Hard Disk to store such data on the copiers to deliver you better features. The study says it can store up to 20,000 documents in this hard disk. Many of us does n’t know about it. The Forensic expert demonstrating how they were able to get the data stored on such a hard disk using a free forensic tool.
“A recent CBS News broadcast raised the issue of security of hard drive data in digital multifunction products. Konica Minolta would like to assure you that we are a leader in the area of MFP security. Our MFPs can ensure documents that are copied, scanned, faxed or otherwise transmitted do not remain stored on the hard drive or in DRAM memory as a standard feature.”
[youtube]http://www.youtube.com/watch?v=yc6L_K04ex0&feature[/youtube]
There are Data security kits available from the manufacturer as a optional hardware upgrade. Those kits provide these extra security.
* Encrypts all data prior to being stored in DRAM
* Encrypts all data stored on the hard drive
* DRAM is cleared after copy, scan, and print use
* Runs automatically without user initiation
* Provides overwriting routines to make deleted data irretrievable
Most of the clients are not aware of these upgrades, it is really important that the manufacturer or supplier should make aware all their clients that there are such kits available.
Best practices for securing MFPs Via ITToolbox
* Meet industry certification: When deciding what brand and model to lease or buy, make sure the device meets industry security standards. Two prominent certifications are ISO 15408 Level 3 Certification and IEEE-2600-2008.
* Ease-of-use versus security: Company management must decide what access controls to use if any. Access controls typically consist of user authentication, account codes, and password protection.
* Data security kits: As mentioned in the CBS News video, MFP distributors need to inform customers about data security packages and their importance. If there are any security concerns, using a data security kit will address them.
* End-of-Life considerations: When buying or signing a lease for MFPs, determine what should happen to the hard drive at end-of-life. Typical options are; destroy the hard drive, keep it on-site, or have the MFP distributor scrub the hard drive using an approved process.
