WHY PRINT AND SCANNING REMAIN AN UNMITIGATED RISK

**The Weakest Link in Your Network: Why Print and Scanning Remain an Unmitigated Risk**

The shift to a paperless office has been one of the most significant consequences of digital transformation, with industries such as law and finance leading the way in reducing physical records of compliance documents, market-sensitive data, and customer information. However, despite the emphasis on electronic data security, the print queue remains a significant vulnerability in many organizations. In this article, we'll explore why print and scanning remain an unmitigated risk and what steps you can take to mitigate this threat.

**The Print Security Problem**

Regulated industries are particularly vulnerable to print security threats, with many organizations treating printers as passive output devices disconnected from any potential threat. However, this assumption is outdated. A recent survey by HP found that 57% of IT decision-makers rate print security as a low priority in their cybersecurity strategy, and 45% aren't confident their print environment meets compliance standards. This is a worrying trend, especially given the potential consequences of a print-related breach.

**The Risks of Managed Print Services**

While Managed Print Services (MPS) can be useful in fixing hardware gaps, they can also introduce new risks. When print jobs are routed through third-party cloud servers without end-to-end encryption, files in transit become exposed. Additionally, granting an external MPS vendor administrative network access creates a backdoor entry point where attackers can easily pivot into the corporate network. A recent example of this can be seen in a ransomware attack on a printing vendor for Bank of China's Singapore branch, which exposed 11,200 customer names and account details.

**Hybrid Work and the Complexity of Print Behavior**

The rise of hybrid work has added another layer of complexity to print behavior, with few companies having clear governance for print behavior once it leaves the office. Office workers may have enterprise-grade tools, but remote workers don't. Employees printing at home may be using unmanaged devices and unsecured Wi-Fi, offering little visibility into what's being printed or where it ends up.

**The Compliance Exposure Under FCA Rules**

For UK financial services firms, the lack of print security is an operational and regulatory risk. The FCA has no statutory cap on fines, and its expectations around data governance extend to how firms handle information physically, not just digitally. Regulators won't distinguish between a breach caused by a compromised server and one caused by an unattended output tray; the obligation to protect customer data is the same either way.

**Security Starts at the Print Queue**

Despite the emphasis on electronic data security, printers remain a significant vulnerability in many organizations. Regulatory demands still call for hard copies and inked signatures, putting print infrastructure at the heart of broader conversations about automation and intelligent document processing. Cybercriminals know this too, and lapses in printer security become an open door to confidential data.

**Closing the Gap with Content-Aware and Cloud-Based Print Management Platforms**

Content-aware and cloud-based print management platforms can close this gap by centrally managing printers, automating driver installs, and enforcing secure "pull printing," where documents release only once a user authenticates at the device. These platforms can also extend governance to remote printing, even if that means restricting what can be printed at home altogether. By doing away with physical print servers, businesses can keep secure releases separate from the product, so nothing installs on the printer itself, and everything is managed remotely.

**Conclusion**

Print and scanning remain an unmitigated risk in many organizations, despite the emphasis on electronic data security. By extending endpoint detection and firmware patching to print fleets, and extending governance to remote printing, businesses can mitigate this threat. Ultimately, security is a board-level concern, and printers need to be treated as the endpoints they are. By taking a proactive approach to print security, organizations can reduce their risk of a print-related breach and protect their customers' data.

**Related Articles:**

* The Best Firewall Software for Your Network * How to Secure Your Cloud Storage * The Importance of Regular Firmware Updates for Your Devices

**Perspectives is a TechRadar Pro initiative that showcases the views and opinions of the best and brightest minds in the technology industry. If you are interested in contributing, find out more here:** [https://www.techradar.com/pro/perspectives-how-to-submit](https://www.techradar.com/pro/perspectives-how-to-submit)