
Device Control
Device Control settings assist with security related to print jobs, specific device functionality and local
device access. Some of these settings must be enabled for device solutions to function properly.
Assess direct connect ports, control panel lock, control panel timeout, command load and execute, file
erase mode, external disk access, disk encryption status, and retaining print jobs.
Stored Data
Assess various stored data settings such as file erase mode, whether to retain print jobs and how long
to hold them, and the use of PIN protection.
File Erase Mode
File Erase Mode enables the MFPs to overwrite the HDD sectors containing a file’s data whenever files
are deleted. This ensures that the original data cannot be recovered. For secure erase, you might
need to set the file system password to remediate the device.
Non-Secure erase - removes access, but the actual data remains on the disk. Although this is
the fastest method, it offers no security.
Secure Fast Erase - removes access, and the data is overwritten with a specific data pattern.
Although this method is slower than Unsecure erase, it provides security.
Secure Sanitizing Erase - removes access, and the data is overwritten repeatedly with an
algorithm that prevents residual data persistence. This method affects performance. However,
it is the most secure erase method.
Threats: HDDs can retain file data in individual sectors which can be reclaimed using specialized
software. User configurations and job data are at risk.
Komentarze do niniejszej Instrukcji