News 2010

Fuji Xerox Raises the Bar for Information Security in Document Management Multi-functional Devices

Hong Kong – 18th August 2010 – Fuji Xerox (Hong Kong) Limited is raising the bar on information security in document management multi-functional device (MFD). The MFD solution pioneer has introduced a number of effective procedures to ensure that confidential corporate information cannot be leaked or stolen during the document management processes, or accessed or modified without authorisation.

“Today, virtually every business organisation has its own copier or a multi-functional device with all-in-one copy, print, scan and fax functions. All kinds of documents are processed and important information is duplicated, stored or transmitted through these devices every day,” said Henry Kwok, General Manager of Marketing at Fuji Xerox (Hong Kong) Limited. “If confidential data is leaked, the business is at risk, reputations can be ruined and, in extreme cases, companies can even close. That means enterprises cannot afford to take risks with information security when it comes to their hardware devices.”

According to Kwok, there are four types of information security threats encountered by the MFDs, including:

1. Leakage of document data and security audit log data from the system hard disk
2. Document data, security audit logs and controller software setting data are accessed, read, used or altered from control panel or web browser without authorisation
3. Document data, print jobs from PC clients, security audit log data, and controller software setting data on the internal network are intercepted or altered
4. Un-authorised access to the internal network via fax modems from public telephone lines

“Fuji Xerox’s full range of MFD products is equipped with the advanced data storage function to ensure the information security. Since 2004, Fuji Xerox has been certified to the internationally recognised ISO 15408 standard – also known as Common Criteria Certificate – for Information Technology Security Evaluation. All data temporarily stored in the system hard disk and deleted after the print jobs are completed. If customers need to store the relevant data in the hard disk, they are required to set the duration of data storage according to their existing data processing policy and hard disk volume,” said Kwok.

Today, Fuji Xerox is the only MFD provider to pass the EAL3 (Evaluation Assurance Level 3), which encompasses the following seven security function targets on the entire device (as of June 2010):

1. Document data and security audit log are encrypted before being stored in the system hard disk
2. Temporarily stored or stored data can be overwritten
3. Security audit log traces and records device malfunction and configuration, and user operation data for incidence follow up
4. System only allow the authorised system administrator to log in to set the security function
5. System can set the individual user right
6. System supports multiple encrypted communication protocol, such as SSL/TLS, IPSec, SNMP and S/MIME
7. System can prevent hackers from accessing the internal network via MFD from public telephone line, and accessing data in the MFD hard disk

As a trusted partner to its customers, Fuji Xerox has stringent disposal and recycling processes of MFD hard disk in place to ensure the greatest possible protection of customer data, which includes: 1) when an MFD reaches the end of its life, the MFD will be shipped to the Fuji Xerox Eco-Manufacturing Co., Ltd. in Thailand where it is taken to pieces for secure disposal. Fuji Xerox will launch two other enhanced professional services at the end of this month, including: 2) dismantling the hard disk from the MFD and returning it to the customer for self-handling, and 3) implementing international standard “3D Procedures” – ‘Degauss’, ‘Destroy’ and ‘Disposal’ of the hard disk in front of the customer. In addition, material is recycled and returned to the industrial manufacturing cycle. The plant has helped Fuji Xerox achieve its goal of reaching zero-landfill with recycling rates of 99.8%.

About Fuji Xerox (Hong Kong) Limited

Fuji Xerox (Hong Kong) Limited is a leading provider and system integrator in knowledge and document management solutions in Hong Kong. Established in 1964 and known formerly as Rank Xerox (Hong Kong) Ltd, Fuji Xerox Hong Kong became part of Fuji Xerox Co. Ltd. in December 2000. It now has more than 800 employees. The company markets and services a full range of knowledge and document management products, solutions and services, including multifunctional devices, office supplies, office digital document solutions, enterprise digital printing and publishing systems, document management services and professional services for small and medium sized enterprises and enterprise workgroups. For more information about Fuji Xerox Hong Kong, please call our customer attention centre on 2513 2513 or visit our Web site: http://www.fujixerox.com.hk.

Issued on behalf of Fuji Xerox (Hong Kong) Limited
by EBA Communications
For further information about this release, please contact:
Brian Paterson / Martina Kong (EBA): (852) 2537 8022
Email: brian.paterson@ebacomms.com / martina.kong@ebacomms.com

Note to editors: this release can also be found on the EBA Web site at www.ebacomms.com. For enquiries on releases by email, Please call Jennifer Tang at (852) 2537 8022 or send a message to jennifer.tang@ebacomms.com.