Re: Securing / erasing hard drives in copiers?

[Brad Judy <Brad.Judy () COLORADO EDU>]

This is a good suggestion.  I think most of the HD-based copier
companies either have wiping or encryption options (or both).

Another thing to look for is vendor device security guides.  I know
Xerox publishes some - I looked them up for one of our departments a
while back.  

Also, make sure that any policies you set regarding security updates are
general to "network devices" instead of computers.  These products have
security vulnerabilities and updated software to patch the
vulnerabilities, but it's rare to find an organization that's on top of
keeping their copiers/printers patched.  

Brad Judy

IT Security Office
University of Colorado at Boulder

-----Original Message-----
From: Joel Rosenblatt [mailto:joel () columbia edu] 
Sent: Monday, February 11, 2008 9:26 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Securing / erasing hard drives in copiers?

You should contact the support organization for your copiers - we use
IKON -

<http://www.ikon.com/>

I have requested that all copier sold to Columbia be equipped with the
software that erases the files on the copier hard drive after a copy is
made or a scan 
is finished.

It is not a free option, so it is being added into the cost of the
copiers.

They seem to sell mostly Cannon copiers.

If you do not have centralized copier support, this will be a
considerable harder project :-)

My 2 cents

Joel Rosenblatt

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel


--On Monday, February 11, 2008 10:28 AM -0500 "Bruggeman, John"
<jbruggeman () HUC EDU> wrote:

> Hello -
>   I was asked by my COO to check into securing / erasing any hard
drives
> in photo copiers in the business office.  I can understand that with
> newer copiers that have PDF and email options that they could and
> probably do have hard drives, but I've not seen a protocol for that
> discussed here before.  I did Google the topic and I saw a Fox News
link
> that I think prompted my boss asking, and some other similar reads,
but
> no protocol or list of "secure" photo copiers.
>
> Fox News:
> http://www.foxnews.com/story/0,2933,258707,00.html
>
> CSO Article:
> http://www2.csoonline.com/blog_view.html?CID=32481
>
>
> Has anyone developed a protocol or practice for erasing / securing a
> photo copier?
>
> I will summarize the results for the group by Friday (2/15) and see
what
> the consensus is from this list.
>
> Thank you for your help -
> John
>
> ===================================================
> John Bruggeman      Director of Information Systems
> Hebrew Union College - Jewish Institute of Religion
> Cincinnati   *  New York * Los Angeles * Jerusalem
> jbruggeman () huc edu   www.huc.edu



Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel