← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6802

CAT III (Low)

Scan to a file share is enabled but the file shares do not have the appropriate discretionary access control list in place.

Rule ID

SV-7027r1_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

Without appropriate discretionary access controls unauthorized individuals may read the scanned data. This can lead to a compromise of sensitive data.<br />The SA will ensure file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

Check Content

The reviewer will, with the assistance of the SA, verify that file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

Fix Text

Create the appropriate discretionary access control list for file shares if scan to a file share is enabled.