Printed documents often remain in the output tray of central printers and all-in-one devices for a longer period of time—for example, because users first print out several files and later collect them all together. It is also possible that the wrong printer was selected on a client and the documents are thus not in the expected location. Since floor or department printers are utilised by many users, unauthorised persons can also view sensitive information or take it with them.
Printouts left in the output trays of decentralised workstation printers that are located in the immediate vicinity of users' offices are also a risk. This is because people who have access to these rooms could also view or remove the printouts.
Fax documents and printed transmission logs in output trays pose a further risk: In addition to fax numbers, dates, times, and page numbers, they often contain a scaled-down image of the first page. Since such logs are only output after a fax has been sent or a transmission error has occurred, they could also remain in the machine for a longer period of time or not be picked up at all. This may leave confidential information unattended in the output tray where, in the worst case, it could be stolen.
Uncollected documents will also eventually be disposed of by users. Here, printouts are often thrown into a random waste basket nearby instead of being securely shredding (especially when they contain sensitive information). Such information can therefore reach the public waste disposal system and potentially fall into the hands of third parties.
Many teleworking locations are also equipped with a printer or an all-in-one device. This is another case in which sensitive information can be disclosed.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)