Lexmark, a global imaging and IoT solutions leader, has expanded its Lexmark Security Services offering to enterprise print customers worldwide. This comprehensive cybersecurity service helps protect an enterprise’s IT infrastructure from attacks by addressing print device vulnerabilities — missing passwords, insecure settings, open ports, outdated firmware — that are routinely unnoticed by security professionals.
“Printers are often overlooked on enterprise networks,” said Bryan Willett, chief information security officer at Lexmark. “Unmaintained printers with outdated security patches are easy targets for stealing sensitive information or as an access point to the wider corporate network. Lexmark Security Services is a highly specialized offering within our Secure by Design approach that helps mitigate the risk of a threat actor from getting a foothold.”
Print-related data breaches impact about two-thirds of organizations, according to the Quocirca Print Security Landscape 2024. The global tech analyst’s report notes that the average financial fallout per incident escalated by a staggering 38% to more than 1 million British pounds (about $1.26 million) since 2023. This is due in part to the fact that only 37% of the IT decision makers surveyed by Quocirca have conducted formal assessments of their print security.
Comprehensive offering includes consulting, assessment and configuration
Lexmark Security Services consist of three core components:
- Security Consulting: Lexmark security experts collaborate with a customer’s IT team to review and enhance the security of their print environment. By analyzing up to 2,500 device settings, firmware versions and user permissions, Lexmark establishes a tailored security configuration baseline. This comprehensive approach includes guidance on print drivers and server infrastructure, ensuring alignment with industry best practices.
- Security Assessment: Lexmark security experts assess the customer’s print fleet, either remotely or on site, gathering data on firmware versions, settings and permissions. Lexmark then creates a scorecard that outlines risks and recommended mitigation steps. The Printer Security Assessment analyzes hundreds of data points to identify firmware vulnerabilities, unsecure device settings, and weak authentication permissions. This data-driven approach produces a comprehensive view of the fleet’s security posture and where it is lacking.
- Configuration Management: For customers lacking time and resources, Lexmark offers a managed service to implement recommended mitigations. This includes Configuration Management, ensuring consistent settings across potentially thousands of devices, and regular firmware updates. Lexmark monitors connected devices daily, pushes approved configurations, and ensures firmware is up to date. This is all performed remotely by Lexmark to remove the security burden from customers.
Early customers praise Lexmark Security Services
Following early deployments across markets in North America and Europe, Lexmark Security Services has garnered positive customer feedback for its simplicity and the security needs it fills.
“We found the Lexmark Printer Security Assessment to be well-done, presenting the information in a clear, easy-to-understand format,” said Paul Vanderwall, cybersecurity team manager at Gordon Food Service, the largest family-operated broad-line food distribution company in North America. “The comprehensive report helped us pinpoint and address key vulnerabilities.”
Jerry Counts, director of information security at Graybar, a Fortune 500 distributor of electrical, communications and data networking products, said, “Most industries are painfully aware of the security issues with printers. I applaud Lexmark for taking bold steps to make securing their devices a much simpler task for customers.”
