HP's Dr. Kimberlee Brannock explains why governance and compliance matter for security. Governance sets policies; compliance proves you're following them. Most organizations ignore printer security even though printers are intelligent endpoints that need the same controls as other devices.
This is Robert Siciliano, CEO of IDTheftSecurity.com. I am here at Black Hat 2017 with Dr. Kimberly Branek from Hewlett Packard. What is your official title?
HP Senior Security Advisor.
Dr. Branek just presented, um, Governance, Compliance and Security. Uh, great presentation. What is the difference between governance and compliance?
Well, governance is overall telling your organization what you want to accomplish and why. So policies is a good example of a governance, and then from a compliance standpoint, the difference is being able to have the evidence to prove that you're complying with those governance aspects, such as your policies.
And so how do both impact security in the workplace?
Both impact the workplace as it relates to security because you need to be able to have governance to have oversight and monitoring so you can get things locked down, you can lock down your endpoints, you can lock down your infrastructure. You need all of that from a governance standpoint. And then there are so many regs and laws that require you to do that very thing, and so you need to have that in place to be able to demonstrate you have adequate security.
And how are corporations failing in regards to printer security?
Well, first and foremost, it's completely overlooked. It's amazing how many organizations completely overlook printers as an endpoint, but they're intelligent devices like any other intelligent device, and they need to get locked down.
Very good. Thank you so much for your time. Thank you. Thank you.
