S 2.49 Procurement of suitable fax machines

Initiation responsibility: IT Security Officer

Implementation responsibility: Purchasing Department

When procuring new fax machines, it should be ensured that common standard security features are implemented, for example:

• exchange of subscriber IDs,
• transmission report,
• journal keeping.

Taking the price/performance ratio into account, the following additional security features are recommended:

• password-protected access,
• password-protected buffer memory,
• configuration of a closed user group,
• exclusion of certain fax connections from sending or receiving.

Review questions:

• When procuring new fax machines, is it ensured that standard security features are implemented?
• When procuring fax machines, is attention paid to adequate additional security features, taking the protection requirements into account?