Data security tailored to client needs

The information on your hard drive will self-destruct in ten seconds. Such a warning may seem like something out of James Bond, but it’s a method of hard disk sanitisation that ever more organisations are turning to in order to protect sensitive and mission-critical content.

Bryan S Ryan deals primarily with two world-class manufacturers – Canon and Kyocera. Like James Bond, both take the issue of security very seriously. For that reason the manufacturers have designed their devices to conform to the highest standards.

For organisations needing to secure the data on their MFDs, Bryan S Ryan offers security kits which are ISO 15408 (Common Criteria) compliant, with security level EAL3. In effect this means that all data on the disk can be encrypted, and when processing is complete, the disk is overwritten to prevent anyone re-reading the information.

For normal security concerns, the devices can be restricted to accept communication from a designated IP address and/or mac address. You can also restrict the functions you do not need, so that users cannot connect to the built-in web browser, or use FTP, IPP or other protocols.

However, some organisations require even higher levels of security. For these, the new Canon Imagerunner Advanced devices can work in conjunction with an Access Management System to restrict all functions, including copying. So if a user tries to copy a document to which they have no access rights, the device “reads” the secure watermark and refuses to copy the document, then records the unauthorised attempt in a database log.

Many organisations will not need this level of security, but every company should consider the issue of what happens when an MFD is traded-in or replaced. Sensitive business data – unless overwritten as described above – persists on the MFD’s hard drive, from where it can be retrieved. And remember that this is also an issue for the photocopier stuck away in a corner and which has never have been connected to any network. These also contain a hard disk which will store image data (in most cases).

As part of its service to clients, Bryan S Ryan will format the disks of devices earmarked for recycling into the industry. However, where customers are still concerned about document confidentiality, BSR will physically shred the disk and issue a certificate, or remove the disk and give it to the customer for safe-keeping or destruction.

Gerry Cheung, Head of MPS at Bryan S Ryan, concludes: “As with all business processes, the level of security enforced needs to be weighed against the cost of securing the data. Bryan S Ryan can help in determining a client’s security needs and, if required, the vendor’s IT Division will even carry out a full security audit.”

Data Loss Prevention projects are now an integral part of a CIO’s annual IT budget. No longer can large firms design DLP strategies on a “what if” basis. Rather, data protection should be a “must have” aspect of any business survival plan.

Managing Director


Sorry, you must be logged in to post a comment.