Printers: The overlooked security threat in your enterprise | TECHtalk

Summary of “Printers: The overlooked security threat in your enterprise | TECHtalk”

The panel argues that networked enterprise printers (and multifunction devices/copiers) are often treated as “benign” office equipment, but they can be serious security risks. Modern printers are described as essentially small, fully functioning network servers—commonly connected to sensitive corporate networks and capable of exposing systems to remote exploitation.

Key points and arguments

• Printers are more than “copy/print devices.” Modern printers can include web servers, FTP functionality, fax features, and web applications. They may not meet common security baselines (e.g., top-tier security criteria), and they may be managed or configured without strong security settings.

• Security controls are often present but not enabled or properly maintained. The discussion emphasizes that manufacturers may ship with security features, but the bigger failure is often deployment and ongoing management—especially when devices are installed and maintained by third-party managed print service providers (often under cost- and speed-driven contracts).

• Organizational responsibility is unclear (“where does the buck stop?”). A major theme is that printer security is frequently not owned by CISOs (or is overlooked by them), creating gaps in patching, auditing, secure configuration, and accountability across the enterprise and vendor ecosystem.

• Printers can store sensitive data and be improperly disposed of. Beyond network compromise, printers can retain data on onboard hard drives and may not securely delete it. The panel cites regulatory enforcement in healthcare when organizations disposed of printers still containing sensitive medical records.

• Healthcare is a high-risk and high-awareness area. The panel notes healthcare’s reliance on paper outputs for clinical workflows and its history of security challenges. They also cite an IDC survey statistic claiming 35% of office security breaches trace back to unsecured printers or multifunction devices (presented as indicating attackers target these devices).

• HIPAA implications for printer security. The panel states there have been multi-million-dollar HIPAA fines for inadequate due diligence in securing printer devices. While HIPAA controls aren’t always spelled out for printers specifically, they require minimum due diligence/protection of protected information—including printers and their storage/media.

• Mobile/BYOD increases the attack surface. Allowing printing from mobile devices or BYOD introduces additional risk: a compromised phone/laptop can access the enterprise network and potentially exploit printers connected to that network.

• Secure wiping and periodic deletion matter—even during the device lifecycle. Not only must old printers be disposed of securely, but devices may need regular secure deletion because documents can accumulate over years. If attackers compromise a device, stored documents could expose data from the entire retention period.

• Managed print service contracts should include explicit security requirements. Procurement is highlighted as a major lever: contracts/RFPs should require minimum security controls and auditing. The panel argues that without contractual incentives, providers operating on thin margins may not prioritize security.

Recommended actions (top steps)

1. Add printer security requirements to procurement/RFPs when using managed print services (so security isn’t optional or unfunded).
2. Clarify ownership and accountability internally—define who is responsible for printer security within the enterprise and empower them.
3. Maintain employee security training, framed as part of broader enterprise security (including safe printing practices).

Audience Q&A highlights

• Concern was raised that eliminating printing doesn’t remove risk entirely because multifunction devices still exist and may be compromised.
• The panel expressed caution that digital/document-scanning workflows can also introduce new threats.
• Examples from comments reinforced that printers/copiers/other network devices have been used as footholds in penetration tests, and that “unsecured storage” is a recurring problem.

Presenters / contributors

• Julia Beauchamp (host; TECHtalk)
• Ken Mingis (Computerworld, Executive Editor)
• JM Porup (CSO, Senior Writer)
• Michelle (mentioned as prompting/reading audience questions from CSO LinkedIn / Tech Talk channel)