A MFD device, with scan to hard disk functionality used, is not configured to clear the hard disk between jobs.
An XCCDF Rule
Description
If the MFD is compromised the un-cleared, previously used, space on the hard disk drive can be read which can lead to a compromise of sensitive data. The SA will ensure the device is configured to clear the hard disk between jobs if scan to hard disk functionality is used.
| Property | Value |
|---|---|
| Responsibility | System Administrator |
| IA Controls | ECRC-1 |
- ID
- SV-7026r1_rule
- Version
- MFD07.002
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Configured the MFD to clear the hard disk between jobs if scan to hard disk functionality is used.