INFORMATION SECURITY
Today security challenges exist everywhere, inside, and outside of a business, both malicious and unintentional. What doesn’t change, is the impact of these challenges whether financial or reputational. Here is an overview of the challenges faced every day.
DATA BREACHES
• Data breaches can do vast reputational and financial damage
• A data breach occurs when personal information held by an organisation is subject to misuse or loss or to unauthorised access, modification, or disclosure
• A data breach can be caused deliberately because of a malicious act from an external party or a disgruntled employee
• It can also be caused by human error or by a failure to implement security measures
• Incorrectly configured systems or user applications can also be blamed for data breaches
POTENTIAL INSIDER THREATS
There are two types of insider threats:
• Insider leaks have clear and malicious intentions behind them
• Unintentional threats could be an everyday occurrence caused by a lack of security awareness or network devices introduced with unclear security protocols in place
NETWORK-CONNECTED DEVICES
• Devices connected to the network can offer a gateway to the internet, potentially exposing data held within these devices to malicious individuals
• Devices without the appropriate security controls could also be used as an entry point into the network environment and vital systems holding sensitive information
TRENDS DRIVING THE NEED FOR SECURITY
Based on European data
- General regulatory compliance is the top information security concern for most European organisations.
- Latest GDPR fines are driven by lack of internal technical and organisational measures rather than the impact to the individuals.
- For many organisations, print and document security is often overlooked as part of IT security strategy.
- Print security is a low IT priority with only 19% considering print security as “very important” compared to overall IT security.
- IT infrastructure is only as secure as its weakest link – print and document infrastructure is often the most at-risk.
OUR APPROACH
Canon’s portfolio of products, solutions and services spans the entire information lifecycle and tackles the issues that matter.
PRINT MANAGEMENT:
The Challenge
Organisations are concerned about potential insider threats, either unintentional or malicious. Print can often be a huge security gap as it’s difficult to have complete visibility of user or document activity in the event of a data breach.
How We Help
Apart from enabling authentication at the print device, we can monitor and store records of all user activity – who printed what, when and from where in the organisation. Read the content of documents sent to print and generate alerts based on keywords contained in the document.
The Benefits
• Prevent potential information leakage
• Ability to pinpoint how a data breach occurred and the employees involved
• Avoid costly fines by offering the required information to the relevant bodies and demonstrate compliance with associated laws
CAPTURE MANAGEMENT:
The Challenge
HR departments, for instance, deal with sensitive employee information, so it’s important that any scanned documents containing payroll details for example, reach their desired destination securely. User error could lead to potential data loss.
How We Help
Authentication can be enabled at the scanning device and users can be assigned personalised scanning workflows based on their roles or departments. For instance, a payroll workflow can be assigned to HR team members, so any scanned documents are sent to Finance, without needing to select a destination or scan settings. Scan jobs and data are encrypted and transmitted over a secure channel. A clear record of device usage, user activity and scan destinations are maintained.
The Benefits
• Reduce risk of information being sent to wrong recipient
• Prevent the external leakage of information by unauthorised users
• Better control of documents and increased user efficiency
DOCUMENT & CONTENT MANAGEMENT:
The Challenge
Organisations face regulatory challenges and compliance responsibilities relating to the management of their data. Documents containing personal data and sensitive information relating to customers and employees, such as contracts or employee passports copies, need to be stored, processed, and destroyed securely, in compliance with data privacy rules.
How We Help
We can help from SMEs to heavily regulated organisations in sectors such as financial services, energy, and telecoms, define and set permissions for each user, to control access to digital documents anytime, anywhere. Centrally managed business rules can be applied to check all the documents a particular user has accessed, as well as set a general retention policy for documents to be deleted after a specified period. Detailed reports are available on all activity to analyse work habits.
The Benefits
• Gain full control of who accesses documents and how these are used for legit business purposes
• Maintain regulatory compliance with laws concerning data retention
• Allow users to work with business documents remotely with complete security