HP Managed Print Services - Topic of Influence: Security July 2021
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
HP Managed Print Services Topic of Influence: Security July 2021
Introduction
Today’s organisations want a managed print services
partner who can look at their print environment and
processes and provide tangible business outcomes.
HP answers this need with HP Managed Print
Services (MPS), a comprehensive suite of hardware,
software, and services delivered in a consultative
engagement. With global expertise, we leverage
our experience and reach to provide customised
and scalable imaging and printing solutions.
As your innovative and strategic partner, we
are ready to work with you to create solutions
that meet your unique needs and help position
you at the forefront of your industry.
This brochure describes how HP is committed to
providing the services, products, and solutions
that help organisations across industries and
across the globe—address your security
concerns in a holistic and thorough manner.
400%
increase in cybercrimes post Covid 20251
What’s your area of interest?
The Topics of Influence series covers the significant factors driving the agenda. In this
brochure, discover how HP invests in the future to create long-term value for our clients.
Other topics of influence include the following:
Diversity and doing good in Financial strength Global Workplace and mobility
communities
Realising the benefits of Investing our healthy profits Harnessing technology Implementing a strategy
inclusion as a business in high-quality, innovative internationally and that works for your
value and discovering how products and solutions to optimising its use to reduce organisation as it adjusts to
HP employees contribute improve your business operational costs changing processes around
to communities around the paper, devices, and the
world workplace
Sustainability Service and delivery Vision Workflow
Providing the services, Ensuring quality, predictability, Continually reinventing Working collaboratively to
products, and solutions to and reliability with a seamless our company and our drive process efficiencies
help you optimise resource transition technologies so that in document capture and
use and recycling industries, communities, and digitisation
individuals can keep creating
what matters most to them
2
Current situation and key challenges
Cybercriminals are more sophisticated, organised, and determined
than ever. They are increasingly exploiting vulnerabilities in the
64%
changing workplace, with their sights set on the ever-growing
number of endpoints and connected devices. As overstretched
IT teams struggle to keep up, endpoint security has become
increasingly critical as the first line of defense.
Security is a continually moving target. The recent pandemic
of ITDMs reported data loss from
and work-from-home mandates, for example, have brought an
unsecured printing practices in six
increase in cyber attacks, with many breaches staying hidden for
months of remote working2
months.
You’re probably using multiple security methods to protect this
data on your networks, PCs, and servers. But is your printing and
imaging environment as secure as the rest of your infrastructure?
SECURE EVERY LAST ENDPOINT—SO TROUBLE STAYS OUT
Critical gaps can occur at multiple points within your environment. Creating a complete printing and imaging security strategy
requires coordinated protection of devices, data, and documents, plus comprehensive security monitoring and reporting
solutions. With HP Secure MPS, you’re more secure on every level, so the trouble that’s out there stays out.
STORAGE MEDIA CAPTURE CLOUD-BASED
Sensitive information may MFPs can easily capture ACCESS
be stored on internal drives and route jobs to many Unsecured cloud
or hard disks, which can be destinations, potentially connectivity may expose
accessed if not protected exposing sensitive data data to unauthorised
users
BIOS AND FIRMWARE CONTROL PANEL
Firmware that becomes Users can exploit printing and
compromised during startup, imaging settings and functions
or while running, could open a from an unsecured control
device and the network to attack panel
OUTPUT TRAY PORTS AND
The output tray is the most PROTOCOLS
common place for sensitive Unauthorised users can access
documents to fall into the the printer via unsecured USB
wrong hands or network ports or via older
protocols (such as FTP or
Telnet)
MOBILE PRINTING
Employees who print on the
go may inadvertently expose
data INPUT TRAY
Special media for printing checks,
prescriptions, and other sensitive
documents can be tampered with
MANAGEMENT NETWORK
or stolen from an unsecured tray
Without adequate monitoring, Printing and imaging jobs
security blind spots across your can be intercepted as they
fleet may remain undetected travel over the network
3
HP’s guiding vision
Printing and imaging security isn’t only about
protecting devices, data, and documents. It’s also about
understanding how an organisation can implement an
effective print security policy and proactively monitor and
manage it. This is critical in a hybrid work environment,
which creates more targets for increasingly sophisticated
cyber attacks.
HP Wolf Enterprise Security enables smart, secure
workflows that protect data and information both on and
off company networks. From services led by
HP credentialed cybersecurity professionals to cloud-
enabled workflows, we provide powerful resources that
help you defend against and recover from cyber threats.
With HP secure print services, HP works with you to assess
your print security vulnerabilities, build a comprehensive
print security policy based on business needs and
best practices, and identify and implement solution
recommendations to achieve and maintain improved
security within your unique environment.
HP Secure MPS can also help your organisation comply
with industry legal and regulatory requirements.
HP MPS capabilities
HP Managed Print Services combines an optimised set of hardware, software, and services
to help organisations harness the power of improved security in printing and imaging
environments. Leveraging more than 50 years of experience in security and industry
standards, HP is a leader in understanding the needs of unique print environments. Taking
this knowledge, HP MPS can help build the best comprehensive security policy for specific
clients.
Device security Access control Network security
Multi-level security features are built into Require authentication for access to Protect your network and documents by
the world’s most secure printers—which can device settings and functions to reduce using a variety of encryption options to
automatically self-heal from attacks3—so IT potential security breaches. secure communication to and from the
doesn’t need to intervene: device.
Allow users to sign in using a variety of
• HP Sure Start automatically self-heals methods, including PIN, LDAP, or Kerberos Firewall settings and unique device
critical operating code authentication. identity certificates help protect your
• Run-time intrusion detection is Common network.
Criteria certified4 to automatically self-heal Enable administrative access controls, so
if memory is compromised critical device settings can’t be tampered Securely elevate your print ecosystem
• HP Connection Inspector automatically with. to the cloud with HP Managed Print
self-heals if it spots suspicious network Cloud Services (MPCS), a fully managed
HP Access Control Secure Authentication experience across home, office, public, and
connections
offers advanced authentication options, shared spaces.
• Whitelisting automatically checks for including touch-to-authenticate with
authentic firmware—digitally signed by HP NFC‑enabled mobile devices.
Protect each device from theft and HP offers additional authentication
tampering by using a lock that requires a solutions such as HP SmartCard Solutions
physical key for removal. Disable physical for US Government or biometric solutions.
ports to prevent unauthorised access or use.
4
Data protection Document security Monitoring and management
HP devices come with built-in encryption Pull printing stores print jobs on a HP’s automated monitoring and
to help protect sensitive business protected server, in the cloud, or on your remediation of device settings offers
information stored on hard drives. PC. Users identify themselves with a PIN or an effective, policy-based approach to
other verification method at their chosen securing printing and imaging devices.
Use built-in device capabilities to securely print location to pull and print their jobs.
overwrite stored data, and safely remove These security measures also eliminate HP’s integration with Security Information
sensitive information. unclaimed prints, which can reduce cost and Event Management (SIEM) tools
and waste. provides real-time monitoring of the
Help employees stay productive with security state of printers. IT security can
effortless HP mobile printing from their • HP Access Control Secure Pull Printing is easily view printer endpoints as part of
smartphones, tablets, and notebooks— a robust server-based solution that offers the broader IT ecosystem and can take
while maintaining security policies and multiple forms of authentication including corrective actions.
managing printer access. badge release, as well as enterprise-level
security, management, and scalability Ensure uncompromised device firmware
Ensure scans are protected with document • HP Secure Print is a cloud-based print to make it easy for IT to apply the latest
encryption features or encrypted email. management solution that lets users print security improvements across the fleet.
Control where users are able to route from PCs and mobile devices, and securely
scans and monitor content for information store print data until authentication and
governance. job release—all without the hassle of
deploying onsite servers and software5
At end of device life, HP Custom Recycling
Services can ensure data is eliminated • Integrate HP Secure Print with HP Insights
from hard drives before responsibly for even more analytics to help optimise
recycling old products. your environment
Equip your printers and MFPs with secure
input trays to prevent theft of special paper
used for printing checks, prescriptions, or
other sensitive documents.
Anti-counterfeiting solutions from HP and
TROY let you confidently print sensitive
documents such as prescriptions, birth
certificates, or transcripts:
• Print with security inks and toner that
stains the paper if subjected to chemical
tampering, or luminesces to authenticate
• Add variable data watermarks to printed
pages
• Incorporate machine-readable codes that
track and audit individual documents
• Embed anti-fraud features, including
custom signatures, company logos, and
security fonts
5
End-to-end security assistance
Add HP Print Security Services to your HP MPS contract to get further layers of protection.
Credentialed HP cybersecurity experts work with you to develop and deploy a custom
plan to advance your print security to address people, processes, and compliance
requirements.
PRINT SECURITY PRINT SECURITY PRINT SECURITY PRINT SECURITY
ADVISORY IMPLEMENTATION RETAINER GOVERNANCE AND
SERVICE SERVICE SERVICE COMPLIANCE SERVICE
Assess and recommend Implement recommendations Reassess and align to Maintain and monitor
• Assess your risks and • Let HP Technical Consultants best practices • Address unremediated
vulnerabilities take the burden off • Reassess your print devices
• Build a comprehensive print IT by implementing environment • Regularly analyse fleet
security policy based on recommendations, • Highlight your progress security settings and identify
business needs and best including device hardening, and challenges in meeting suspicious patterns
practices policy setting, certificate compliance • Produce monthly reports
deployment, and device
• Create a detailed roadmap for • Provide ongoing advice and for proof of regulatory
configuration to send syslogs
implementing process and guidance compliance
to SIEM tools
technology recommendations • Identify your top five risks
Design: One-time service Transition: One-time service Manage: Recurring services
6
Case study: HP’s global
MPS expertise in action
An international bank, with over
7,500 offices based in 70 countries
worldwide, and 35,000 printers,
engaged HP to carry out Security
Advisory Services.
“It’s great. It’s a good report, and
it gives us a lot to think about.”
“It’s more than I expected…the
risk grading has saved us a job.”
Feedback from the client
Problem HP solution Results
• Client wanted to achieve a better view of • Carry out a pre-onsite analysis for two • Client gained visibility into the security
the security risk posture of their printer weeks before visiting the client configuration of its devices and how they
fleet vary between regions
• Install a trial version of HP Security
Manager software on a client test server • Client saw how effective HP Security
Manager software is in reducing
• Perform onsite analysis over three days, infrastructure risks
covering extended printing infrastructure,
including databases, servers, and • The analysis led the client to see more
workflows security functionality in its existing
HP Capture and Route software
• Produce final report with
recommendations three weeks later • The HP account team identified simple
process changes, enhancing delivery of
the security service
7
Our commitment
HP offers superior protection for your print environment, providing the latest security
technologies and processes for the advanced management of devices, data, and
documents. With HP, you have our commitment to not only securing your print fleets
and documents today, but also proactively maintaining your security status against
the ever-changing threat landscape and evolving compliance requirements.
HP retained leadership due to its broad range of products, services, solutions, and
partnerships that address the security requirements of businesses of all sizes.6
HP’s leadership spans print and computing—with a long history of innovation
from HP Labs.6
In Quocirca’s 2020 Print Security study, HP ranked the highest in terms of brand
perception, with 44% of IT decision makers viewing HP as having the strongest
print security offerings in the market.6
Why HP?
HP’s most advanced
#1 of America’s #10 of world’s print security with 1,000,000+
most responsible 250 best-managed layered protection devices under
companies7 companies8 and resiliency 3 contract9
170 countries 9 37+ years of World’s most The planet’s most
experience 9 secure printers3 comprehensive
carbon neutral
MPS offering10
1 zdnet.com/article/fbi-says-cybercrime-reports-quadrupled-during-covid-19-pandemic/
2 Quocirca Print Security 2020 Landscape, https://print2025.com/reports/print-security-2020, December 2020. In the 12 months prior to the COVID-19 pandemic, 66% of ITDMs
reported at least one print-related data loss. In the first six months (so half the time) of the COVID-19 pandemic, as workers switched to remote working, that figure was 64%.
3 HP’s most advanced embedded security features are available on HP Enterprise and HP Managed devices with HP FutureSmartfirmware 4.5 or above. Claim based on HP review
of 2021 published features of competitive in-class printers. Only HP offers a combination of security features to automatically detect, stop, and recover from attacks with a
self-healing reboot, in alignment with NIST SP 800-193 guidelines for device cyber resiliency. For a list of compatible products, visit hp.com/go/PrintersThatProtect. For more
information, visit hp.com/go/PrinterSecurityClaims.
4 Third-party certification based on Common Criteria Information Technology Security Evaluation ISO/IEC 15408 Standard requirements as of May 2019-2024. Certification
applicable to HP Enterprise and Managed devices running HP FutureSmartFirmware version 4.5.1 and later. For more information, visit commoncriteriaportal.org/files/epfiles/
Certification%20Report%20-%20HP%20Intrusion%20Detection.pdf.
5 HP Secure Print works with most network-connected printers and MFPs. On-device authentication requires HP FutureSmartfirmware 4.8 or newer. Supported card readers
include X3D03A (HP USB Universal Card Reader) and Y7C05A (HP HIP2 Keystroke Reader). Internet connection required for some functionality. For more information, see
hp.com/go/secureprint.
6 Quocirca: The Print Security Landscape, 2020, December 2020.
7 Newsweek, 2020.
8 The Wall Street Journal, 2019.
9 Based on HP internal data and research. HP does business in 170 countries, has over 1,000,000 devices under contract in the HP direct business, and has over 36 years of
experience in printing: hp.com/hpinfo/abouthp/histnfacts/museum/imagingprinting/0018/index.html.
10 HP Carbon Neutral MPS is certified as a CarbonNeutral service in accordance with The CarbonNeutral Protocol, carbonneutral.com/how/carbonneutral-protocol.
© Copyright 2017-2021 HP Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for
HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed
as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
4AA7-0327EEW, July 2021, Rev. 5You can also read
