2012 Report on Global Citizenship

Securing Your Network

Xerox is committed to being the leader in multifunction device and printer security. As such, we are committed to helping customers maintain a secure network environment, particularly as it relates to the use of multifunction products (MFPs) – those that print, copy, fax and scan. Since all MFPs, regardless of vendor, contain hard drives and software, they require security precautions associated with other network peripherals.

We strongly endorse the internationally recognized ISO 15408 Common Criteria for Information Technology Security Evaluation and have validated more than 50 of our office MFPs to this standard. This gives us one of the industry's broadest arrays of printers and copiers certified to meet our customers' strictest security requirements. Our policy and practice is to have an entire multifunction system evaluated – not just individual features or a security kit.

Although we test extensively for security vulnerabilities in our software before we bring a product to market, we recognize that someone with intent and the requisite knowledge may, at times, find a way around security protections. We encourage people to notify us of any network security concerns, and we move immediately to provide a solution. We develop software patches for vulnerabilities and post them at www.xerox.com/security In addition, we quickly update our manufacturing process to integrate the security fixes.

We manage security throughout the product life cycle, from design to development, manufacturing, deployment and, ultimately, to disposal. Security functionality is completely integrated at the individual device level and extends seamlessly to the fleet. State-of-the-art encryption is used extensively to protect customer information, both while at rest in the device and in motion to and from the device. The authentication and authorization features are unmatched in their ability to control usage; yet, they also are easy to use. We put special emphasis on the care and handling of machines that are returned to us after lease expiration or otherwise. Disks in these devices are destroyed or completely remastered to remove any residual customer information before they are reused.

The threat landscape is continually evolving, so we teamed up with McAfee to design a security system to help companies protect against threats to confidential data processed by printers and multifunction devices. Xerox will be embedding McAfee whitelisting technology into Xerox devices to protect against as-yet unanticipated threats. McAfee technology will be a standard feature on future MFPs with the option for an upgrade that provides full integrity protection.

On another front, Xerox and Cisco have joined forces to respond to the explosion of personal devices in the workplace. Our collaboration with Cisco is based around the TrustSec® solution and will enable companies to cope with the proliferation of network endpoints – such as printers, tablets, and webcams – and deploy security policies faster than ever before. Cisco's TrustSec® ISE 1.1 solution now ships with a list of more than 40 Xerox device models that are ready for security policy enablement. Customers who use ISE 1.1 will find that including Xerox devices in their security policies is simpler and requires much less effort than adding non-Xerox printing devices.

Ensuring the security of the IT systems and networks for our customers is paramount. Security solutions can be designed to meet the needs of a specific client and utilize a robust suite of solutions and products to meet those needs. Solutions such as application security, vulnerability management, access and identity management, encryption and user provisioning aid clients in managing their risk. Security is integrated into customer solutions from the beginning of the engagement and maintained throughout the life cycle of the contract.