Lexmark Launches Print Security Assessments, Managed Print Security Services
Printer and print-fleet security continues to be a critical area for the document-imaging industry, with cyber threats going to grow. To that end, Lexmark International today announced what we can call managed print security services with an expansion of its Lexmark Security Services, which is available to enterprise print customers worldwide.
The firm says that this service helps protect an enterprise’s IT infrastructure from cyberattacks by addressing printers’ security vulnerabilities such as missing passwords, insecure settings, open ports, and outdated firmware, and that are routinely unnoticed by security professionals.
“Printers are often overlooked on enterprise networks,” explained Bryan Willett, chief information security officer at Lexmark. “Unmaintained printers with outdated security patches are easy targets for stealing sensitive information or as an access point to the wider corporate network. Lexmark Security Services is a highly specialized offering within our Secure by Design approach that helps mitigate the risk of a threat actor from getting a foothold.”
Lexmark noted that print-related data breaches affect about two-thirds of organizations, according to the Quocirca Print Security Landscape 2024. The global tech analyst’s report notes that the average financial fallout per incident escalated by 38 percent to more than $1.26 million since 2023. This is due in part to the fact that only 37 percent percent of the IT decision makers surveyed by Quocirca have conducted formal assessments of their print security.
Lexmark Security Services consist of three core components:
- Security Consulting: Lexmark security experts collaborate with a customer’s IT team to review and enhance the security of their print environment. By analyzing up to 2,500 device settings, firmware versions, and user permissions, Lexmark establishes a tailored security configuration baseline. The service includes guidance on print drivers and server infrastructure, ensuring alignment with industry best practices.
- Security Assessment: Lexmark security experts assess the customer’s print fleet, either remotely or on site, gathering data on firmware versions, settings and permissions. Lexmark then creates a scorecard that outlines risks and recommended mitigation steps. The Printer Security Assessment analyzes hundreds of data points to identify firmware vulnerabilities, insecure device settings, and weak authentication permissions. This data-driven approach produces a comprehensive view of the fleet’s security posture and where it is lacking.
- Configuration Management: For customers lacking time and resources, Lexmark offers a managed service to implement recommended actions. This includes Configuration Management, ensuring consistent settings across potentially thousands of devices, and regular firmware updates. Lexmark monitors connected devices daily, pushes approved configurations, and ensures firmware is up to date. This is all performed remotely by Lexmark to remove the security burden from customers.
Customer Feedback
Following early deployments across markets in North America and Europe, Lexmark Security Services has garnered positive customer feedback for its simplicity and the security needs it fills.
“We found the Lexmark Printer Security Assessment to be well-done, presenting the information in a clear, easy-to-understand format,” said Paul Vanderwall, cybersecurity team manager at Gordon Food Service, the largest family-operated broad-line food distribution company in North America. “The comprehensive report helped us pinpoint and address key vulnerabilities.”
Jerry Counts, director of information security at Graybar, a Fortune 500 distributor of electrical, communications and data networking products, said, “Most industries are painfully aware of the security issues with printers. I applaud Lexmark for taking bold steps to make securing their devices a much simpler task for customers.”
For more information, visit Lexmark here.
More Resources
You must be logged in to post a comment.