HP continues to shine a spotlight on print security with last years announcement of embedded print security features that aim to mitigate the threat of malware. So how vulnerable are printers to external attacks, and how can businesses limit their risks?
While the prevalence of connected printers and MFPs bring convenience and productivity, they also pose security risks. Along with the capabilities to capture, process, store and output information, most print devices also run embedded software. Information is therefore susceptible at a device, document and network level. Not only can confidential or sensitive data be accessed by unauthorised users – whether maliciously or accidentally – but network connectivity makes vulnerable print devices potential entry points to the corporate network.
Any data breach can be disastrous – leading to internal consequences such as the loss of IP or productivity, as well as external repercussions including brand and reputational damage, legal penalties and loss of customers.
In today’s evolving Internet of Things (IoT) threat landscape, hackers that target printers with lax security can wreak havoc on a company’s network. Data stored on print devices can be used for fraud and identity theft and once hackers have a foothold, the unsecured print device provides an open door to the network. Compromised devices can be harnessed as botnets and used as launch pads for malware propagation, DDoS attacks and devastating ransomware attacks.
It is unsurprising to see that external hacking and DDoS attacks are top print security concerns amongst businesses. And although 95% of businesses indicate that print security was an important element of their overall information security strategy (55% say it was very important, and 40% fairly important) – just 25% reported that they are completely confident that their print infrastructure is protected from threats.
To address these threats, print devices need to include robust security protection. Fortunately, more manufacturers are embedding security in new generation devices. HP’s enterprise printers for instance, can detect and self-heal from malware attacks through run-time intrusion detection and whitelisting. The newly announced HP Connection Inspector stops malware from “calling home” to malicious servers, stopping suspicious requests and automatically triggering a self-healing reboot. Meanwhile Xerox’s ConnectKey Technology enabled family of printers incorporates McAfee whitelisting technology which constantly monitors for malicious malware and automatically prevents it from running.
However, it only takes one rogue, unsecured device to weaken security. Whilst progress is being made on embedding security technology in the new generation of printers, the reality is that most organisations have a mixed fleet of devices – old and new, from different manufacturers.
Organisations should therefore undertake a print security threat assessment. Such assessments are commonly offered under a managed print/document service (MPS/MDS) contract, and seek to uncover security vulnerabilities.
Quocirca’s MDS study revealed that 31% of organisations have completed such an assessment with another 57% indicating that their assessment is underway. Organisations report that the top goal (65%) for a security assessment is to protect against new, advanced threats.
The most sophisticated security assessments such as that from MPP, not only make recommendations for device replacement and optimisation, but also offer ongoing and proactive monitoring of devices to identify potential malicious behaviour. Ultimately this requires that print devices are monitored as part of a broader security platform – MPP for instance, offers integration with security and information and event management (SIEM) tools.
As both internal and external threats continue to evolve, a multi-layered approach to print security is essential to combat the security vulnerabilities that are inherent in today’s networked printers. Unless an organisation regularly tests its defences, it will be at risk of leaving a part of the print infrastructure exposed – enabling a skilled hacker to penetrate the network.
A business can be targeted no matter how big or small, so a comprehensive print security strategy that encompasses threat detection, preventative measures, threat monitoring and analytics alongside incident response and recovery is vital in today’s IoT era.
You might have heard about Managed Document Services, but you’re not sure whether or not it is a service your business would benefit from. Ask yourself the following questions and uncover the benefit a Managed Document Services program could provide your business.
If you have 3 printers in your local small-town office or if you have hundreds in 10 offices scattered across the country, Managed Document Services are right for your business. The benefits of print management can apply to any business, regardless of size and print equipment quantity.
Most organisations do not take the time to define a document strategy. It is time-consuming and falls at the bottom of the priority list. A lack of process can cost a significant amount of money, in the long run. The costs correlated with printing can add up to between 1-10% of a businesses’ total revenue. Installing a print strategy that effectively monitors and manages your fleet of equipment can provide your company cost savings of up to 40%.
Most businesses do not have an exact understanding of their print costs. Commonly we find businesses only consider the cost of equipment, service and supplies. However, these hard costs are only a portion of what makes up your total printing investment.
When determining this number, you also have to consider numerous indirect costs that can significantly impact your total investment. You must take into account every component: equipment, supplies, maintenance, employee burden rates and equipment life. These add up much higher than anticipated, which is an unpleasant surprise for many businesses.
As we’ve suggested, implementing a process could save your business up to 40%. Additionally, an initial audit will uncover unknown print costs and missed savings opportunities. Many MDS programs save companies money because they allow employees to focus on their priorities and leave these print technology duties to professionals who perform these tasks on a daily basis.
These questions are positioned to get you thinking about your current print environment and how it is being managed. Every company has a unique situation, but we believe Managed Document Services will provide value to most businesses. Request a print audit to get a more solidified answer.