Sharp security library

Most Commercial and Government businesses have to meet industry standards and government regulations, such as HIPPA, GLB, SOX, Privacy, Identity Theft, IEEE, Common Criteria, which is why Sharp MFPs are designed to meet these needs and to comply to them.

Sharp provide additional information for the following standards and regulations:

Privacy

Preserving Intellectual Property and Client Confidentiality

Intellectual property represents roughly 70% of the market capitalization of U.S. businesses of all sizes. On a whole, intellectual property theft costs roughly $60 billion a year in lost competitiveness and revenues, legal fees and loss of reputation. On average, each incident costs U.S. businesses $300,000.¹

Chart 1: Areas of Reported Intellectual Property Theft

National legislation such as the Health Insurance Portability and Accountability Act of 1996 (HIPAA—also known as the Kennedy-Kassebaum Act) as well as the Gramm-Leach-Bliley Act in banking and finance are already in effect to further protect patient and client rights to privacy. Document security is a significant issue in both private and public sectors of the economy.

Given this business environment, the Sharp Document Security Suite helps professional service firms, health care providers and financial firms better safeguard the confidentiality of their clients' information.

Health-Care Industry: hospitals, medical and dental practices, counseling services, medical insurance firms, and pharmaceuticals and clinical trials

• Helps protect confidential patient treatment records

Financial Industry: banks, insurance companies and financial service firms involved in financial transactions, mergers/acquisitions and stock trading

• Helps protect client and confidential transaction information

Research and development, compensation and HR Departments, as well as IT Security Managers, will find this to be a valuable tool in protecting intellectual property and confidential personnel information.

R&D/High-Tech Facilities: semiconductors, computers, pharmaceuticals, biotechnology, defense contractors and government labs

• Helps protect trade secrets and against industrial espionage

Additionally, Sharp security-enabled MFPs are gaining wide acceptance in both government and military installations where document security is an integral part of a broader security program.

Government and Military Organizations: state and local government, military, embassies, and consulates that handle a large number of classified and confidential documents

• Helps protect national security, military and trade secrets

Sharp understands these concerns, and while we believe in the power and versatility of digital multifunction systems, we also believe in providing solutions to help address our customers' security concerns.

¹Source: Trends in Proprietary Information Loss; American Society for Industrial Security (ASIS) International, 2002

Financial Privacy: The Gramm-Leach-Bliley Act

The Financial Modernization Act of 1999, also known as the Gramm-Leach-Bliley Act or GLB Act, includes provisions to protect consumers' personal financial information held by financial institutions. There are two principal parts to the privacy requirements: the Financial Privacy Rule and the Safeguards Rule.

The Financial Privacy Rule governs the collection and disclosure of customers' personal financial information by financial institutions.

The Safeguards Rule requires all financial institutions to design, implement and maintain safeguards to protect customer information.

These two requirements apply to "financial institutions," which include not only banks, securities firms and insurance companies, but also companies providing many other types of financial products and services to consumers. Among these services are lending, brokering or servicing any type of consumer loan, transferring or safeguarding money, preparing individual tax returns, providing financial advice or credit counseling, providing residential real estate settlement services, collecting consumer debts and an array of other activities.

The Federal Trade Commission has authority to enforce the law with respect to "financial institutions" including non-bank mortgage lenders, loan brokers, some financial or investment advisers, tax preparers, providers of real estate settlement services and debt collectors.

To implement its information security program, each financial institution must:

• Designate an employee or employees to coordinate the program
• Identify reasonably foreseeable internal and external risks to the security, confidentiality, and integrity of customer information and assess the sufficiency of any safeguards in place to control the risks
• Design and implement safeguards to address the risks and monitor the effectiveness of these safeguards
• Select and retain service providers capable of maintaining appropriate safeguards for information and require them, by contract, to implement and maintain such safeguards
• Adjust the information security program in light of developments that may materially affect the program

Learn How Sharp Can Help

The MFP is the natural link between information and the way people use it, which is why Sharp offers a comprehensive security suite designed to provide our clients with a scalable approach to securing confidential information. For more information on how Sharp can help meet your privacy needs, please download the Sharp Security Suite brochure.

For more information on the GRAMM-LEACH-BLILEY Act, please see the Federal Trade Commission website at: http://www.ftc.gov/privacy/privacyinitiatives/glbact.html/.

HIPAA: Privacy Standards

In enacting HIPAA, Congress mandated the establishment of standards for the privacy of individually identifiable health information (such as patient records and files). According to HIPAA Standards for Privacy of Individually Identifiable Health Information (45 CFR Parts 160 and 164), a covered entity must have appropriate administrative, technical and physical safeguards to protect the privacy of health information. HIPAA privacy regulations mandate that security safeguards be in place to control access and protect information from accidental or intentional disclosure to unauthorized persons and from alteration, destruction or loss.

As a result, new information management practices have been introduced in the health care industry to limit the access and viewing of patient records. The new generation of digital copiers and MFPs are silently storing thousands of patient records in memory every time a print or copy is made, which if accessed, could affect your business.

HIPAA covers health plans, health care clearinghouses, and those health care providers who conduct certain financial and administrative transactions (e.g., billing and funds transfers) electronically.

The final security rule states that: "The implementation of reasonable and appropriate security measures also supports compliance with privacy standards, just as lack of adequate security can increase the risk of violation of the privacy standards." Covered entities must ensure the confidentiality, integrity and availability of all electronic protected health information the covered entity creates, receives, maintains or transmits.

HIPAA requires the implementation of technical security measures to guard against unauthorized access to protected health information transmitted over an electronic communications network. Covered entities must provide physical safeguards, including facility access, workstation security, and device and media controls.

Learn How Sharp Can Help

The MFP is the natural link between information and the way people use it, which is why Sharp offers a comprehensive security suite designed to provide our clients with a scalable approach to securing confidential information. For more information on how Sharp can help meet your privacy needs, please download the Sharp Security Suite brochure.

For more information, please see the HHS Fact Sheet located at: http://aspe.os.dhhs.gov/admnsimp/final/pvcfact2.htm.

Industry Studies and Standards

Click a link below to view other sites involving information privacy topics.

Gramm-Leach-Bliley Act
The Federal Trade Commission's site that provides information on the Financial Modernization Act of 1999, also known as the Gramm-Leach-Bliley Act or GLB Act, which includes provisions to protect consumers' personal financial information held by financial institutions.

HIPAA
The Health and Human Service's Office of Civil Rights site on "Medical Privacy—National Standards to Protect the Privacy of Personal Health Information," which provides background information on the Healthcare Information Portability and Accountability Act of 1996.

Common Criteria Homepage
This site has information on the Common Criteria for IT Security Evaluation (CC), the Common Evaluation Methodology (CEM), and their use. The U.S. is represented within the CC Project by the National Information Assurance Partnership (NIAP), a joint NIST and National Security Agency (NSA) project.

Sharp Common Criteria Validation
The National Information Assurance Partnership page that provides detailed information on Sharp Electronics' Common Criteria Validated products.

IEEE Hard Copy Security Standard IEEE-2600™-2008
The IEEE-2600-2800 defines security requirements (all aspects of security including, but not limited to, authentication, authorization, privacy, integrity, device management, physical security, and information security) for manufacturers, users, and others on the selection, installation, configuration, and usage of hardcopy devices (HCDs) and systems, including printers, copiers, and multifunction devices (MFDs), and the computer systems that support these devices.

This standard identifies security exposures for these HCDs and systems, instructs manufacturers and software developers on appropriate security capabilities to include in their devices and systems, and instructs users on appropriate ways to use these security capabilities. The standard was developed by the P2600 Hardcopy Device and System Security Working Group which is an approved standards project sponsored by the IEEE Information Assurance Standards Committee of the IEEE Computer Society. Sharp and other vendors participated in the P2600 working group and developed this standard.

For more information, please visit http://standards.ieee.org/

Download the How Sharp MFPs comply with IEEE-2600™ 2008 security standard in PDF format.

Privacy Rights
The Privacy Rights Clearinghouse site, a nonprofit consumer education, research, and advocacy program, whose publications empower individuals to take action to control their personal information by providing practical tips on privacy protection.

Electronic Privacy Information Center
Electronic Privacy Information Center's (EPIC) site; a public interest research center which focuses public attention on emerging civil liberties issues and to protect privacy, the First Amendment and constitutional values.

Fight Identity Theft
Fight Identity Theft is an organization whose goal is to make one more aware of the risks of identity theft and to present clear steps one can take to protect oneself.