Whitepapers

Regulatory Compliance and MFP Security Solutions Key Issues and Considerations A Muratec Whitepaper 2010 ©

Capture INTRODUCTION
In the early 1980s securing a computer, printer or fax machine meant placing it behind a locked door. That was before computers were on every desktop, and before the advent of multi-functional products (MFPs). The MFP consolidates functionality into a single, space-saving platform, enabled businesses to address varied document processing needs, specifically walk-up copy and fax operations and network scan, fax and print functions. From document creation through output and distribution, the MFP plays a pivotal role in today’s connected workplace.

Indeed, as a centralized document processing hub, the MFP has transformed the office landscape by speeding the generation and dissemination of information. In the pre-Internet era documents were carried by courier or express mail services. Now those same documents are easily converted into electronic files, via the MFP, and communicated locally or globally–in an instant. As technology has evolved, so too has the speed at which business moves.

This shift from paper-based to electronic business processes presents formidable challenges for IT security professionals, and others tasked with safeguarding information assets. With nearly instantaneous dissemination capabilities, business-critical documents can be routed to unauthorized individuals in seconds.

To remain competitive in today’s challenging economic climate, organizations–now more than ever– have to protect information assets from theft or loss. Information security is particularly critical for businesses subject to a labyrinth of federal regulations, such as HIPAA, SOX and GLBA. In this white paper, we will examine the issue of regulatory compliance as it relates to office technology, and thus provide guidance on security solutions that can help support enterprise-wide compliance initiatives. continue reading...

Technology/Security Whitepaper

Capture 1. Overview

About this Whitepaper

This document is intended for IT administrators who would like to study the security features, system architecture and network impact of Canon U.S.A.’s imageWARE Remote service.

This document is NOT confidential.

About imageWARE Remote

imageWARE Remote is a service developed by Canon Inc. that is being made available to Canon U.S.A.’s dealers and service providers, enabling them to provide better service to their customers.

imageWARE Remote consists of two components: imageWARE Remote Meter Reading (collects meter reads automatically from enabled imageRUNNER devices) and imageWARE Remote Service Monitor (provides information about device status, error notifications and statistics about parts lifetime and consumables). Both services use the same underlying technology - either eRDS (embedded Remote Diagnostic System), or RDS Plug-in (imageWARE Enterprise Management Console Remote Diagnostic System Plug-in) to capture device information and transmit such information to a server managed by Canon Inc. via the Internet, where it is accessible by the service provider via a web interface (the Canon Inc. Universal Gateway or “UGW”).

The RDS Plug-in solution requires imageWARE Enterprise Management Console to be installed as a base operating platform and this requires a server to host the software. continue reading...

The eCopy™ Solution Product Brief: Addressing Security Issues

Capture Our solutions work with standard digital copiers and office scanners, and provide a simple touch screen interface that makes scanning as easy as copying. This paper outlines the key features that make eCopy products the most secure document integration solutions available today.

eCopy solutions link office devices to mission-critical business applications. Since they use shared office scanners and copiers that connect to your network, security is a prime concern. Additionally, since paperbased documents frequently contain information that is confidential or sensitive in nature, the privacy of scanned documents must be assured. At the same time, if organizations are to realize the huge cost savings that electronic document distribution makes possible, the scanning process must be simple. eCopy has a proven track record in the electronic document distribution business, spanning more than twelve years. eCopy has worked with numerous Fortune 500 companies, government agencies, and other organizations around the world to develop solutions that meet their most stringent security requirements.

eCopy solutions provide security in four key areas:

Authentication
Document security
Activity tracking
Device security

Since every organization has a different set of security concerns, eCopy provides a flexible range of configuration options to suit your specific requirements. This product brief presents an overview of the product functionality and addresses each of these key areas in turn. continue reading...

Sharp Assures Full Compliance with IEEE-2600-2008 MFP Security Standard

Capture1 Executive Summary
This white paper describes how Sharp MFPs (1) comply, meet and exceed the IEEE-2600-2008 Security Standard' Requirements

The Industry Leader in MFP Security
As the office equipment industry transitioned from analog to digital imaging, Sharp recognized the urgent need to address vulnerabilities inherent in network-connected multifunctional devices (MFPs). In doing so, Sharp led the industry with the first Common Criteria-validated security solution, and to this day remains the only manufacturer with an encryption and data overwrite product validated at the highest commercial level.

The Sharp Approach
Sharp takes a comprehensive approach to security by protecting every step in the document lifecycle, from the initial scan or print to final output and distribution. Fully scalable, Sharp’s Security Suite enables Information Technology (IT) personnel to confidently safeguard their infrastructure and MFP installed base, without affecting network traffic or workgroup productivity. Specifically, Sharp MFPs (Segment 2 and up, including color) can be customized to meet unique requirements, help optimizing data confidentiality and integrity. For example, Sharp MFPs support:

User and device authentication
Data encryption
Memory clearing and sanitization
Access control, user authorization and restrictions
Architecture that virtually eliminates virus vulnerabilities and provides resistance to denial of
service (DoS) attacks
Activity monitoring (compliance auditing)
Port management and filtering

IEEE-2600-2008 Background
The IEEE-2600-2800 defines security requirements (all aspects of security including, but not limited to, authentication, authorization, privacy, integrity, device management, physical security, and information security) for manufacturers, users, and others on the selection, installation, configuration, and usage of hardcopy devices (HCDs) and systems, including printers, copiers, and multifunction devices (MFDs), and the computer systems that support these devices. continue reading...

PCI and Data Security The Prioritized Approach and a Look Ahead

Capture Introduction
The Payment Card Industry (PCI) Security Standards Council™ guides the efforts of Chief Information Security Officers, Compliance Officers, and others who protect cardholder information for payment card issuers, merchants, banks, processors, and service providers. The Council's PCI Data Security Standard (DSS) is a comprehensive set of requirements for security infrastructure, policies, and practices, intended to improve the security of cardholder and account data throughout the industry.

As the PCI Council completes its fifth year of operation, this paper reviews:

• successes and setbacks of the PCI Data Security Standard

• implications of the Council's new Prioritized Approach to DSS

• practical steps professionals can take to improve data security and maintain PCI DSS compliance

• effects of emerging technologies and legislation

This paper is an update and guide, not a tutorial on PCI DSS. Readers new to the standard should consult the excellent materials1 available from the PCI Security Standards Council itself, or one of the many introductory guides available from solution providers.

Compliance and Security
Few doubt that PCI DSS has helped standardize industry security practices and improve data protection. Often cited as a model for industry self-regulation, DSS helps card brands, issuing banks, merchants, and others reduce direct losses from fraud, and risks of reputation loss and litigation from data security breaches. Industry members comply with the standard out of direct financial self-interest, or indirectly to support the interests of powerful partners. DSS has been especially effective at improving security practices on the industry's front lines. In the words of Ellen Richey, Chief Risk Officer for VISA, "More than 90% of the largest card accepting merchants and about 97% of processors in the United States have validated compliance with PCI. The companies that fully embrace it are protecting themselves every day by maintaining their defenses, scanning systems, detecting anomalies and addressing threats."3 continue reading...

The Business Value of "Green" Document Management Solutions

Capture Not long ago, sustainability efforts were thought to be little more than a nice gesture on the part of an organization hoping to impress current and potential customers. However, in today's business environment, "being green" has become an essential element for driving new and current business opportunities. As part of the desired effect to gain the associated business benefits of being more environmentally sensitive, more companies are making it a high priority to kick off "green IT" strategies, including an examination of all elements of their IT infrastructure.

Often times, hardcopy is an overlooked item of a company's "green IT" strategy. It shouldn't be. The costs of using paper/toner/ink supplies and machine energy consumption associated with printers/copiers/multifunction devices are considerable. Any effort to better manage these hardcopy equipment assets will have a substantial bottom-line impact.

IDC believes that "green" document management tools such as Nuance's PaperPort, OmniPage, and PDF Converter, as well as new products added to its portfolio as a result of its eCopy acquisition, are a simple way to move toward a more "green" hardcopy environment while achieving important cost and efficiency objectives. To support this assessment, IDC interviewed six current Nuance customers in North America. These customers have been using Nuance solutions for between six months and two years and have achieved significant benefits since implementing the technology. IDC's ROI research reveals that the implementation of such tools has helped these customers realize the following results: continue reading...

Sharp Assures Full Compliance with IEEE-2600-2008 MFP Security Standard

Capture Executive Summary
This white paper describes how Sharp MFPs (1) comply, meet and exceed the IEEE-2600-2008 Security Standard Requirements

User and device authentication
Data encryption
Memory clearing and sanitization
Access control, user authorization and restrictions
Architecture that virtually eliminates virus vulnerabilities and provides resistance to denial of service (DoS) attacks
Activity monitoring (compliance auditing)
Port management and filtering

Case Study: Muratec Building a “Best in Class” Website.

Capture1 The Situation

Muratec is one of the leading manufacturers of printers, fax machines and copiers. During the 1990s, the client made a critical strategic decision: since stores like Offi ce Depot and Staples were eating into margins and driving down prices, they decided to withdraw from the retail channel and focus on direct sales. They needed a robust, comprehensive website to support this decision.

The Solution
RSW identifi ed the key success factors:

- Benchmarking
- Clarity
- Process
- Coordination

RSW built a site that would accommodate the needs of both customers and a third-party sales force. To ensure that the site was the “best in the industry,” we analyzed competitor sites using over 20 different benchmarks, and made sure that the Muratec site met or exceeded the top performer in each category. continue reading...

Canon EOS and Avid® Media Composer 5® Workfl ow

Capture INTRODUCTION
Canon continues to be at the forefront of digital photographic technology. The Canon EOS series HD-DLSRs (including the 1D Mark IV, 5D Mark II, 7D, 60D, Rebel T2i and Rebel T1i) shifts the paradigm in modern digital photography by effectively combining two highly versatile cameras in a single package. These cameras allow experienced photographers and photojournalists to now shoot HD video with the same refined image quality, advanced workflow, customizable control and incredible responsiveness that they have come to expect from their Canon DSLR in stills.

In conjunction with high quality Canon EF lenses, high-sensitivity Canon CMOS sensors, and the advanced capabilities of Canon’s proprietary DIGIC 4 image processors, every HD video-capable EOS camera gives seasoned videographers new tools to create the kind of rich and dramatic imagery needed for any job. Photographers and videographers can capture HD video with a level of image quality and creative control found only in professional video models, using a broad selection of interchangeable EF lenses, including specialized optics such as fisheye, ultra-wide, super-telephoto, macro, tilt-shift, high-speed and image stabilized lenses.

This white paper will be divided into two main parts. The first part will explain concepts and terms that are important for users deliberating on an appropriate post-production process. The second part will detail a general workflow for use with Canon EOS series HD-DLSRs in conjunction with Avid Media Composer 5. continue reading...

SmartSearch Product Overview

Capture Introduction
Designed as a new direction in document management, SmartSearch has quickly become the definition of Document Intelligence for today’s business. SmartSearch offers businesses of all sizes a powerful, comprehensive and value driven solution built on the strength of Service Oriented Architecture and the Microsoft .NET platform.

Offered as a workgroup product, SmartSearch utilizes the power of Microsoft SQL Server ™ to drive the rapid retrieval of documents archived on the network. Through stored queries or content based searches, users can now locate any record in only a matter of seconds.

Once retrieved a document can be annotated, redacted or launched prior to its distribution to other users or outside parties. Easily emailed or faxed, information stored in SmartSearch is now available for others to use in their daily decision making processes. The integrity of annotated documents is always maintained as annotations are stored outside of the image file. This approach has an added benefit of allowing documents written to WORM media to be annotated.

Committed to its adherence of industry standards and open architecture, SmartSearch offers network administrators no restrictions to where records are archived. SmartSearch requires only local, mapped, or UNC drive access from the SmartSearch server for the secure storage of records to your network. Archived documents are now immediately available to users via LAN or WAN or VPN access.

SmartSearch offers options for extending the value of your investment through strategic partnerships with some of the most powerful products on the market including Kofax Capture for image and data capture, eCopy and NSi Autostore for MFP Panel Integration, Biscom and Castelle for fax management, and Objectif Lune for variable data and conditional print management archival. continue reading...

770-449-9100

Whitepapers