---
title: NIST Outlines Guidance for Copier Security
description: The NIST has issued guidelines for copier security, including protecting the information processed, stored, or transmitted on digital multifunction devices.
---

- [](https://www.linkedin.com/company/stratix_systems)
- [](https://www.facebook.com/stratixsystemsinc)
- [](https://twitter.com/stratix_systems)
- [](http://www.stratixsystems.com/google.com/+StratixSystemsReading)
- [](mailto:inquiry@stratixsystems.com;marketing@stratixsystems.com)

- [Blog](http://www.stratixsystems.com/about-us/blog/)
- [Resources](http://www.stratixsystems.com/resources/)
- [Contact Stratix Systems](http://www.stratixsystems.com/about-us/contact-stratix/)

[![Stratix Systems](https://blog.stratixsystems.com/hubfs/StratixSystems-Nov2016/Image/logo-homepage.png)](http://www.stratixsystems.com/)

- [IT & Managed Services](http://www.stratixsystems.com/it/) 
    - Proactive: Managed Services 
          - [Managed IT / Network Services](http://www.stratixsystems.com/it/pro-mang-services/pro-mns/)
          - [Backup and Disaster Recovery](http://www.stratixsystems.com/it/pro-mang-services/pro-bdr/)
          - [Hosted E-mail and Management](http://www.stratixsystems.com/it/pro-mang-services/pro-email/)
          - [vCIO / CTO Services](http://www.stratixsystems.com/it/pro-mang-services/vcio-cto-services/)
          - [About our NOC](http://www.stratixsystems.com/it/pro-mang-services/about-our-noc/)
    - IT Support Services 
          - [Servers and Virtualization](http://www.stratixsystems.com/it/it-support-services/servers-virtual/)
          - [E-mail / Exchange](http://www.stratixsystems.com/it/it-support-services/email-exchange/)
          - [Networks](http://www.stratixsystems.com/it/it-support-services/networks/)
          - [Security](http://www.stratixsystems.com/it/it-support-services/security/)
          - [IT and Network Assessments](http://www.stratixsystems.com/it/it-support-services/network-assessments/)
- [Printing Systems](http://www.stratixsystems.com/print/) 
    - By Device 
          - [Copiers (MFP) & Printers](http://www.stratixsystems.com/print/by-device/copier-printers/)
          - [Production Print Systems](http://www.stratixsystems.com/print/by-device/prod-print-fiery/)
          - [Wide-format Systems](http://www.stratixsystems.com/print/by-device/wide-format/)
          - [Digital Duplicators](http://www.stratixsystems.com/print/by-device/digital-duplicators/)
          - [Toner and Supplies](http://www.stratixsystems.com/print/by-device/toner-supplies/)
    - By Solution 
          - [Managed Print Services](http://www.stratixsystems.com/print/by-solution/managed-print-services/)
          - [Fiery Solutions](http://www.stratixsystems.com/print/by-solution/fiery-solutions/)
          - [Mobile and Wireless Printing](http://www.stratixsystems.com/print/by-solution/mobile-wireless-printing/)
          - [Print Security](http://www.stratixsystems.com/print/by-solution/print-security/)
          - [Cost Recovery](http://www.stratixsystems.com/print/by-solution/cost-recovery/)
- [Document Management](http://www.stratixsystems.com/edm/) 
    - [Microsoft SharePoint Solutions](http://www.stratixsystems.com/edm/sharepoint/)
    - [Microsoft Office 365 Services](http://www.stratixsystems.com/edm/office-365/)
    - [Scan-Store-Retrieve Solutions](http://www.stratixsystems.com/edm/scan-store-retrieve/)
    - [Workflow Automation Services](http://www.stratixsystems.com/edm/workflow-automation/)
    - [Shredding and Destruction](http://www.stratixsystems.com/edm/shredding-destruction/)
- [Support](http://www.stratixsystems.com/support/) 
    - [Service Request](http://www.stratixsystems.com/support/service-request/)
    - [My Stratix: Client Portal](http://client.stratixsystems.com/einfo)
- [About Us](http://www.stratixsystems.com/about-us/) 
    - About Stratix Systems 
          - [News and Events](http://www.stratixsystems.com/about-us/news-events/)
          - [Certifications and Awards](http://www.stratixsystems.com/about-us/certs-awards/)
          - [Technology Partners](http://www.stratixsystems.com/about-us/tech-partners/)
    - Contacts and Locations 
          - [Wyomissing – Reading Area](http://www.stratixsystems.com/about-us/contact-stratix/reading/)
          - [Bethlehem – Lehigh Valley Area](http://www.stratixsystems.com/about-us/contact-stratix/lehigh-valley/)
          - [King of Prussia – Philadelphia Area](http://www.stratixsystems.com/about-us/contact-stratix/philadelphia/)
          - [Northern and Central New Jersey](http://www.stratixsystems.com/about-us/contact-stratix/nj/)
- [Careers](http://www.stratixsystems.com/about-us/careers/)



# Stratix Systems Blog

- You are here:
- [Home](http://www.stratixsystems.com)/
- [Stratix Systems Blog](https://blog.stratixsystems.com)/
- NIST Outlines Guidance for Copier Security

# [NIST Outlines Guidance for Copier Security](https://blog.stratixsystems.com/nist-outlines-guidance-for-copier-security)

03/17/2015 /  in [Blog](https://blog.stratixsystems.com/topic/blog), [Business](https://blog.stratixsystems.com/topic/business), [Office Equipment](https://blog.stratixsystems.com/topic/equipment), [Print](https://blog.stratixsystems.com/topic/print), [Security](https://blog.stratixsystems.com/topic/security) /

- [Tweet](https://twitter.com/share)

*Re-posted via: [NIST Outlines Guidance for Security of Copiers, Scanners -- GCN](http://gcn.com/articles/2015/02/25/nist-replication-device-security.aspx?s=gcntech_260215)*

The National Institute of Standards and Technology announced its internal report 8023: [Risk Management for Replication Devices](http://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8023.pdf) is now available.

The guidance covers protecting the information processed, stored or transmitted on replication devices (RDs), which are devices that copy, print or scan documents, images or objects. Because today’s RDs have the characteristics of computing devices (storage, operating systems, CPUs and networking) they are vulnerable to a number of exploits, NIST said.

Among the threats to RDs are:

- Default passwords that can be can be used to control the device.
- Data that is transmitted or stored unencrypted making it subject to unauthorized exposure and modification.
- Service interruptions from user interfaces, power outages and internal mechanical or software operations.
- Unauthorized use that wastes ink, paper and toner while denying service for legitimate users.
- Alteration/corruption of passwords or configuration settings.
- Outdated and/or unpatched operating systems and firmware.

In order to protect RDs and the networks they’re attached to, NIST recommends IT managers limit or restrict access to RDs by either placing the devices in secured areas or requiring identification and authentication for use. IT managers should also make sure that event logging is enabled so they can troubleshoot problems and investigate suspicious activity. Likewise monitoring and error handling capabilities should be configured.

According to NIST, not all compromises are easy to detect. The warning signs that may indicate misuse or a compromise include:

- Display malfunctions or shows incorrect information.
- Consumables (ink, paper, or other supplies) run out faster than usual.
- Increased number of failed or timed-out jobs or device completes processes slower than expected.
- Unexplained/unauthorized changes in configuration settings.
- Device uses more network time/bandwidth than usual.
- Time stamps do not align or make logical sense.
- Communications with unknown IP or email addresses increase.

Just as with any networked device, outdated or unpatched software and firmware is a common vulnerability. IT managers should regularly review vendor security bulletins and install patches and upgrades as needed.

When RDs are no longer needed by an organization, they should be wiped or purged, and all nonvolatile storage media should be destroyed. Passwords and user PINS should be changed, and the device configurations should be reset to the factory default settings.

The NIST document also includes a security risk assessment template in table and flowchart format to help organizations determine the risk associated with replication devices.

- [Tweet](https://twitter.com/share)

**Tags:** [Blog](https://blog.stratixsystems.com/topic/blog), [Business](https://blog.stratixsystems.com/topic/business), [Office Equipment](https://blog.stratixsystems.com/topic/equipment), [Print](https://blog.stratixsystems.com/topic/print), [Security](https://blog.stratixsystems.com/topic/security)

[A Guide to Buying the Right MFP](https://blog.stratixsystems.com/guide-to-buying-the-right-mfp) [A Guide to Choosing and Buying a Copier for Your Business](https://blog.stratixsystems.com/guide-to-choosing-buying-a-copier)

- [Blog](https://blog.stratixsystems.com/blog)
- [News and Events](http://www.stratixsystems.com/about-us/news-events/)
- [Certifications and Awards](http://www.stratixsystems.com/about-us/certs-awards/)
- [Technology Partners](http://www.stratixsystems.com/about-us/tech-partners/)
- [Apply Now](http://www.stratixsystems.com/about-us/applynow/)
- [Careers](http://www.stratixsystems.com/about-us/careers/)
- [Our People](http://www.stratixsystems.com/about-us/our-people/)
- [The Benefits](http://www.stratixsystems.com/about-us/the_benefits/)
- [Why Stratix?](http://www.stratixsystems.com/about-us/why-stratix/)
- [Contact Stratix Systems](http://www.stratixsystems.com/about-us/contact-stratix/)

### Recent Posts

<https://blog.stratixsystems.com/benefits-of-digitized-workflow-beyond-cost-savings> 

**[Benefits of Digitized Workflow Beyond Cost Savings](https://blog.stratixsystems.com/benefits-of-digitized-workflow-beyond-cost-savings)**

 11/28/2016 - 11: 25 AM

<https://blog.stratixsystems.com/document-management-and-interoperability> 

**[Document Management and Interoperability](https://blog.stratixsystems.com/document-management-and-interoperability)**

 11/27/2016 - 11: 24 AM

<https://blog.stratixsystems.com/how-to-increase-revenue-by-7210-per-employee> 

**[How to Increase Revenue by $7,210 per Employee](https://blog.stratixsystems.com/how-to-increase-revenue-by-7210-per-employee)**

 11/23/2016 - 11: 21 AM

<https://blog.stratixsystems.com/how-less-paper-benefits-the-continuum-of-care> 

**[How Less Paper Benefits the Continuum of Care](https://blog.stratixsystems.com/how-less-paper-benefits-the-continuum-of-care)**

 11/19/2016 - 09: 00 AM

### Other Categories

- [Awards (2)](https://blog.stratixsystems.com/topic/awards)
- [Backup (2)](https://blog.stratixsystems.com/topic/backup)
- [BDR (2)](https://blog.stratixsystems.com/topic/bdr)
- [Blog (78)](https://blog.stratixsystems.com/topic/blog)
- [Business (17)](https://blog.stratixsystems.com/topic/business)
- [Cost Reduction (1)](https://blog.stratixsystems.com/topic/cost-reduction)
- [Cyber Security (2)](https://blog.stratixsystems.com/topic/cyber-security)
- [Data Loss (3)](https://blog.stratixsystems.com/topic/data-loss)
- [Dealership (5)](https://blog.stratixsystems.com/topic/dealer)
- [Disaster Recovery (1)](https://blog.stratixsystems.com/topic/disaster-recovery)
- [Events (1)](https://blog.stratixsystems.com/topic/events)
- [Intelligent Business Continuity (1)](https://blog.stratixsystems.com/topic/ibc)
- [IT Support (6)](https://blog.stratixsystems.com/topic/it-support)
- [Managed Print Services (1)](https://blog.stratixsystems.com/topic/mps)
- [Managed Services (5)](https://blog.stratixsystems.com/topic/managed-services)
- [Mobility (1)](https://blog.stratixsystems.com/topic/mobility)
- [Multi-Function (3)](https://blog.stratixsystems.com/topic/mfp)
- [News (7)](https://blog.stratixsystems.com/topic/news)
- [Office Equipment (7)](https://blog.stratixsystems.com/topic/equipment)
- [Performance (3)](https://blog.stratixsystems.com/topic/performance)
- [Print (6)](https://blog.stratixsystems.com/topic/print)
- [Proactive (3)](https://blog.stratixsystems.com/topic/proactive)
- [Security (4)](https://blog.stratixsystems.com/topic/security)
- [SMB (6)](https://blog.stratixsystems.com/topic/smb)
- [Stratix Systems (3)](https://blog.stratixsystems.com/topic/stratix-systems)
- [Stratix Systems Social Media (1)](https://blog.stratixsystems.com/topic/stratix-systems-social-media)
- [Uncategorized (5)](https://blog.stratixsystems.com/topic/uncategorized)
- [Windows (2)](https://blog.stratixsystems.com/topic/windows)

see all

### Post Archives

- [April 2016 (22)](https://blog.stratixsystems.com/archive/2016/04)
- [May 2016 (9)](https://blog.stratixsystems.com/archive/2016/05)
- [September 2016 (9)](https://blog.stratixsystems.com/archive/2016/09)
- [November 2016 (9)](https://blog.stratixsystems.com/archive/2016/11)
- [October 2016 (7)](https://blog.stratixsystems.com/archive/2016/10)
- [June 2016 (6)](https://blog.stratixsystems.com/archive/2016/06)
- [July 2016 (4)](https://blog.stratixsystems.com/archive/2016/07)
- [October 2014 (3)](https://blog.stratixsystems.com/archive/2014/10)
- [March 2015 (3)](https://blog.stratixsystems.com/archive/2015/03)
- [December 2015 (3)](https://blog.stratixsystems.com/archive/2015/12)
- [March 2016 (3)](https://blog.stratixsystems.com/archive/2016/03)
- [July 2014 (2)](https://blog.stratixsystems.com/archive/2014/07)
- [February 2015 (2)](https://blog.stratixsystems.com/archive/2015/02)
- [April 2015 (2)](https://blog.stratixsystems.com/archive/2015/04)
- [June 2015 (2)](https://blog.stratixsystems.com/archive/2015/06)
- [July 2015 (2)](https://blog.stratixsystems.com/archive/2015/07)
- [November 2014 (1)](https://blog.stratixsystems.com/archive/2014/11)
- [August 2016 (1)](https://blog.stratixsystems.com/archive/2016/08)

see all

- Quick Nav 
    - [IT & Managed Services](http://www.stratixsystems.com/it/)
    - [Printing Systems](http://www.stratixsystems.com/print/)
    - [Document Management](http://www.stratixsystems.com/edm/)
    - [Support](http://www.stratixsystems.com/support/)
    - [Contact Stratix Systems](http://www.stratixsystems.com/about-us/contact-stratix/)

- Learn More 
    - [Resources](http://www.stratixsystems.com/resources/)
    - [Blog](https://blog.stratixsystems.com/blog)
    - [News and Events](http://www.stratixsystems.com/about-us/tech-partners/)
    - [Technology Partners](http://www.stratixsystems.com/about-us/tech-partners/)
    - [Certifications and Awards](http://www.stratixsystems.com/about-us/certs-awards/)

### Recent Posts

### Contact Stratix

Corporate Headquarters  
 1011 North Park Road  
 Wyomissing, PA 19610  
 P: 610-374-1936  
 F: 610-375-1957  
 E: [Send an E-mail](mailto:inquiry@stratixsystems.com,marketing@stratixsystems.com)

[Stratix Systems Employee Sign-in](https://mail.stratixsystems.com/owa) | Locations in: [Reading,](http://www.stratixsystems.com/about-us/contact-stratix/reading/) [Bethlehem,](http://www.stratixsystems.com/about-us/contact-stratix/lehigh-valley/) [King of Prussia,](http://www.stratixsystems.com/about-us/contact-stratix/philadelphia/) [and Edison.](http://www.stratixsystems.com/about-us/contact-stratix/nj/)

© Stratix Systems | [Privacy Policy](http://www.stratixsystems.com/about-us/privacy-policy/) | No one knows technology solutions like Stratix.