Educause Security Discussion mailing list archives
Re: Securing / erasing hard drives in copiers?
From: Brad Judy <Brad.Judy () COLORADO EDU>
Date: Mon, 11 Feb 2008 17:08:07 -0700
This is a good suggestion. I think most of the HD-based copier companies either have wiping or encryption options (or both). Another thing to look for is vendor device security guides. I know Xerox publishes some - I looked them up for one of our departments a while back. Also, make sure that any policies you set regarding security updates are general to "network devices" instead of computers. These products have security vulnerabilities and updated software to patch the vulnerabilities, but it's rare to find an organization that's on top of keeping their copiers/printers patched. Brad Judy IT Security Office University of Colorado at Boulder -----Original Message----- From: Joel Rosenblatt [mailto:joel () columbia edu] Sent: Monday, February 11, 2008 9:26 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Securing / erasing hard drives in copiers? You should contact the support organization for your copiers - we use IKON - <http://www.ikon.com/> I have requested that all copier sold to Columbia be equipped with the software that erases the files on the copier hard drive after a copy is made or a scan is finished. It is not a free option, so it is being added into the cost of the copiers. They seem to sell mostly Cannon copiers. If you do not have centralized copier support, this will be a considerable harder project :-) My 2 cents Joel Rosenblatt Joel Rosenblatt, Manager Network & Computer Security Columbia Information Security Office (CISO) Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel --On Monday, February 11, 2008 10:28 AM -0500 "Bruggeman, John" <jbruggeman () HUC EDU> wrote:
Hello - I was asked by my COO to check into securing / erasing any hard
drives
in photo copiers in the business office. I can understand that with newer copiers that have PDF and email options that they could and probably do have hard drives, but I've not seen a protocol for that discussed here before. I did Google the topic and I saw a Fox News
link
that I think prompted my boss asking, and some other similar reads,
but
no protocol or list of "secure" photo copiers. Fox News: http://www.foxnews.com/story/0,2933,258707,00.html CSO Article: http://www2.csoonline.com/blog_view.html?CID=32481 Has anyone developed a protocol or practice for erasing / securing a photo copier? I will summarize the results for the group by Friday (2/15) and see
what
the consensus is from this list. Thank you for your help - John =================================================== John Bruggeman Director of Information Systems Hebrew Union College - Jewish Institute of Religion Cincinnati * New York * Los Angeles * Jerusalem jbruggeman () huc edu www.huc.edu
Joel Rosenblatt, Manager Network & Computer Security Columbia Information Security Office (CISO) Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel
Current thread:
- Securing / erasing hard drives in copiers? Bruggeman, John (Feb 11)
- <Possible follow-ups>
- Re: Securing / erasing hard drives in copiers? Gary Dobbins (Feb 11)
- Re: Securing / erasing hard drives in copiers? Joel Rosenblatt (Feb 11)
- Re: Securing / erasing hard drives in copiers? Eric Case (Feb 11)
- Re: Securing / erasing hard drives in copiers? Brad Judy (Feb 11)