1. HP Imaging & Printing Security
October 2012

2. Objective
Understand potential security and exposure risks, and learn about available technology.
Agenda
Risk
Research findings
Imaging & Printing Solutions
Closing and Questions

3. Print Security

4. Is your sensitive data really secure?
What are you protecting?
Proprietary data
Financial records
Confidential materials
Employee information
Compliance with industry standards
What is the risk?
Financial damage
Litigation
Loss of licensing
ID theft
Brand image
Company reputation
”It takes twenty years to build a reputation and five minutes to ruin it. If you think about that, you’ll do things differently.” -Warren Buffett
Have you extended your IT policies and procedures around security and compliance to include imaging and printing?
[Engage Customers, questions include: ]
Have you ever printed a document and forgotten to pick it up? How many printed documents are sitting unattended at your printer or MFP right now?
Do those documents contain sensitive information? Personnel records? Confidential business data?
Sensitive data can be at its most exposed during printing, from the computer to the printer to the actual printed document.
“What are the safeguards you have in place today?” What are some of the barriers to do that?

5. Mind the security gap Critical gaps can occur at multiple points within your imaging & printing environment.
Here are several examp

6. Accidental data breaches through printing?
Research findings:
How much effort has the organization put into managing the security of printed documents?
Accidental data breaches through printing?
Despite the digital age, information is still shared and reproduced among business partners and customers as well as within the enterprise using printers and multifunction peripherals (MFPs).
In Quocirca’s recent enterprise study, 52% of respondents indicated that printing is critical or very important to business activities with a further 24% indicating that printing plays an important, if not essential, role.
Left unsecured, it is all too easy for printed, scanned and copied documents to end up in the wrong hands, either accidentally or intentionally.
Graph 1
Although many enterprises have built a strong security perimeter to protect servers, network equipment and PCs, the survey reveals that many enterprises are failing to pay the same strategic priority to printers and MFPs. As a consequence, 70% of respondents indicated they have suffered one or more accidental printing-related data breaches.
Graph 2
Given that MFP and print security is low on the agenda, it is unsurprising to see that just 42% of businesses had placed some or significant effort into print security.
Nevertheless, the survey reveals that businesses that are more dependent on printing to support their activities are most likely to have made efforts to secure printed documents. However, businesses cannot afford to be complacent - whether printing plays a critical or just supportive role, the likelihood of sensitive or confidential information passing through is high and therefore businesses must take a serious view of their potential risk exposure through an unsecured print infrastructure.
70% Report one or more breaches
Quocirca “Closing the print security gap” October 2011

7. Imaging and Printing Solutions

8. Implement a secure printing strategy
Policy
Remediate
Assess
Devices
Adjust
Managing the Imaging & Printing Security Lifecycle
1. Protect data
2. Protect devices
3. Protect documents
4. Monitor and manage
How to protect data:
Encrypt print jobs. Make files nearly impossible to read if rerouted or intercepted. Encryption can be all-inclusive or customized according to the users or devices involved.
Maintain security protocols. Not every employee needs access to all MFPs’ capabilities. By controlling access to MFPs’ settings, cut down on potential security breaches and printing costs.
Authenticate users. Protect data before it reaches the printer tray. Instead of letting a document print as soon as it’s sent to the printer, store jobs on the printer until the employee is at the machine and verified.
Store print jobs on a protected server. Rather than sending jobs straight to the printer, use pull printing to send them to a protected server. Once the employee is at any printer or MFP connected to the server, worldwide, and is verified, the document is “pulled” from the server.
How to protect printing devices:
Encrypt hard disk data. If someone tried to access a printers’ hard disks, encryption would prevent them from reading the data stored on it.
Erase memory. After a document has been printed, erase and overwrite the data from the hard disk to prevent it from being unnecessarily stored and potentially accessed.
Control access. By controlling access to settings, cut down on potential security breaches and printing costs.
How to protect printed documents:
Protect sensitive media. Printers and MFPs can be equipped with secure paper input trays to protect special paper or media used for printing checks, prescriptions or other sensitive documents.
Prevent tampering and alteration. By using cutting-edge toner technology, such as secure MICR toner, dramatically reduce the potential for fraudulent alteration of documents.
How to monitor and manage the printing fleet:
Implement a monitoring and management solution. With so much going on, it’s important to have fleet-wide control of settings and access. From the highest level to the smallest details, ensure you can track usage, audit practices, set defaults and control access.
HP has solutions to implement this strategy, we will now cover a few in detail.
Encrypt print jobs
Maintain security protocols
Authenticate users
Store print jobs on a protected server
Encrypt hard disk data
Erase memory
Control access
Protect sensitive media
Prevent tampering and alteration
Implement a monitoring and management solution

9. HP Imaging and Printing Security Center
The industry’s first policy-based solution that helps you increase security across your imaging and printing fleet.
Add a new HP device manually or automatically apply security policies instantly as soon as devices are added to your network
Apply a single corporate security policy across an HP Imaging and Printing fleet
Confirm device compliance and identify security risks with built-in reporting tools
Solution runs in the background verifying a fleet’s security settings and applies correct policy settings to any non-compliant features
Key Features:
The built-in HP Best Practices Base Policy provides a baseline level of security derived from HP security expert recommendations
Intuitive HP Policy Editor simplifies policy creation and changes
HP Instant-on Security automatically connects HP devices to the solution and immediately configures them to be compliant with a specific corporate security policy

10. HP Access Control Express
Bundle of Pull Printing with Mobile Release and Job Accounting software
Job prints securely with the user at the device
User prints to the pull print queue.
The HP AC Express pull print server stores the job until it is released by the user from a connected MFP or single function printer.
Users utilize the Express app and camera on the phone to read a barcode on the front panel of the device to authenticate and release their print job
Key Features:
HP Access Control Express provides a cost-effective pull print solution by allowing users to use their smart phone to authenticate and release stored print jobs
Includes job accounting (without quotas) and basic reporting

11. HP Access Control Professional
A complete bundle of secure pull print, job accounting and rights management
Optimize printing workflows
Create print rules
Increase device security
Enable pull printing with encryption
Authenticate using Mobile Release
Manage printers
Authenticate with HP proximity card readers
Authenticate users via PIN/PIC
Track and allocate quotas for print use
Key Features:
With HP Access Control Professional, robust authentication and pull printing reduce the risks of unclaimed print jobs, sensitive documents left unattended, and frustrated users.
Sophisticated job tracking helps you allocate printing costs and optimize device deployment.
Intelligent management software and full reporting options can increase your control and insight into your printing environment.

12. HP and Troy Secure Document Printing
Server-based, on-demand secure printing on plain paper
Select a designated printer with a print queue configured for security printing
HP and TROY Secure Document Printing
Receives the print file
Inserts selected security features into the print file
Routes job to designated laser printer
Output reformatted with secure features on designated laser printer
Key Features:
Server-based deployment – Enables installation on existing networks with any PCL5 Laser printer and MFPs
Plain paper printing – Reduces or eliminates dependency on expensive pre-printed security paper
Workflow simplification – Enables printing to general office printers so you don’t have to lock paper trays or establish dedicated security printers

13. HP ePrint Enterprise
Secure mobile device printing for a workforce on the go
MS Exchange or Blackberry Enterprise
Server (BES)
HP ePrint Enterprise Server (and Blackberry handles the print job and routes it to the right printer
Users use an app on their iPhone, iPad, Android or Blackberry to discover a printer on the network and send a print job
Jobs are printed on HP LaserJet or other network printers
HP ePrint Enterprise keeps all print processes and data between mobile devices and the printer secure within the Enterprise firewall
HP ePrint Service app for Apple iOS and Android authenticate to the internal ePrint Enterprise server over VPN or local network
Blackberry app communicates securely through Blackberry Enterprise Server to the ePrint Enterprise server
Any -capable device attached to the corporate system can send an /attachment from anywhere.
Printer-agnostic – virtually any printer from any manufacturer can register with the ePrint Enterprise server* No Printer Driver’s needed.
Node-locked and incremental add-on license structure adds flexibility for enterprises
ABOUT SECURITY WITH HP ePrint Enterprise
When using the HP ePrint Enterprise solution to print to your company offices, your data does not leave your secure enterprise network. All rendering and rastering of documents is done within the enterprise, ensuring tight security.
And the HP ePrint Enterprise solution, additional layer of security can be integrated, as the solution also works with leading pull printing/user authentication solutions that require user authentication at the printer.
Can be automatically synchronized with corporate LDAP - HP ePrint Enterprise also allows “Administrator” group users to take advantage of integrated Active Directory authentication by using their existing corporate and password to log into the HP ePrint Enterprise administration page rather than being forced to generate (and track) additional user/password accounts for HP ePrint Enterprise. This capability offers heightened security while validating Admin users against a company’s Active Directory credentials.
Examples/user scenarios:
If your work demands spending much of your time on the road, you could use HP ePrint Enterprise to send important documents to print to any of your company’s offices. Simply use your smartphone to send files to a relevant and trusted printer—no matter how far you are from your destination—and you’ll have your prints in time for the big meeting.
A regional manager or executive from your company visiting your corporate office could take advantage of HP ePrint Enterprise without having to worry about access or compatibility. Using her smartphone, she can quickly identify a printer near her temporary office, select the printer and print the document—all without logging onto a VPN.
File types supported by ePrint Enterprise:
MS Office Word (.doc, .docx, .docm)
MS Office Excel (.xls, .xlsx, .xlsm, .xlsb)
MS Office Powerpoint (.ppt, .pptx, .pptm)
PDF (.pdf)
Image files (.jpg, .jpeg, .gif, .png, .bmp)
HTML files (.htm, .html)
MS Web archives (.mht)
Text and Rich Text files (.txt, .rtf)
XPS documents (.xps)
Key Features:
Increase productivity by printing from mobile devices
Quickly locate the nearest available printer with full search functionality
All communication is done within the company firewall
Can be integrated with HP Access Control pull printing for hold and release security

14. Thanks!