Unattended Printouts
A page in the tray belongs to whoever reaches it first.
What Is Unattended Printouts?
A document sent to a shared printer sits in the output tray until someone collects it, and that someone is not always you. In this exercise you print a confidential pay review, leave for a meeting, and learn from a colleague that it was read before you got back. You report it, then print the same class of document again using Secure Print, which holds the job on the server until you enter your PIN at the device.
What You'll Learn in Unattended Printouts
- Recognize that a shared output tray is an open surface where any passing colleague can read, move, or photograph your document
- Identify the print jobs that need holding at the device rather than the default of printing straight to a communal tray
- Configure Secure Print so a job stays on the print server until you authenticate at the printer
- Release a held job with your print PIN and collect every page before you walk away
- Report an exposed printout promptly, with the time it printed and who could have seen it
Unattended Printouts — Training Steps
-
Monday, 8:47 AM
The partners' quarterly meeting starts at 9:00 in the room down the hall. You are at your desk in the open-plan office, coffee in hand, running through the prep list. The shared multifunction printer sits on the credenza a few steps away, where everyone on the floor collects their jobs.
-
A Print Request
An email from Diane Okafor, the managing partner, lands in your inbox. She needs the compensation review printed for the 9:00 meeting.
-
Opening the Document
You click the link in Diane's email. The People portal opens on the Partner Compensation Review. It lists every partner's draw, bonus pool allocation, and next-year adjustment by name.
-
Sending It to the Printer
Everything looks right. You click Print. The print dialog comes up with its usual defaults: the shared floor printer, one copy, Normal print. You confirm it the way you have a hundred times before, without a second look.
-
The Page Lands in the Tray
The printer wakes up and the compensation review rolls out into the output tray, face up, where the whole floor collects their jobs.
-
9:00 Sharp
Diane appears at your desk. The meeting is starting and she needs you to take the minutes. You grab your laptop and follow her down the hall. The printout is still sitting in the tray. You will grab it on the way, you tell yourself.
-
Back at Your Desk
The meeting ran long. You get back to your desk to find a message from Priya Raman, an analyst who sits across the floor.
-
Retrieving It, Too Late
You hurry over to the printer. The compensation review is exactly where Priya left it, face down beside the tray. You pick it up, but the exposure has already happened. It was readable, in the open, for ninety minutes.
-
What Actually Went Wrong
The document itself was handled correctly right up until it printed. The failure was leaving confidential output unattended in a space everyone shares.
-
Calling IT
This is a data exposure, not a lost page. Colleagues who should never see partner pay have seen it. You call IT Support to report it straight away, before anyone else has to.
Security Framework Coverage
CWE
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CIS Controls
- CIS 3 Data Protection
- CIS 14.5 Train Workforce Members on Causes of Unintentional Data Exposure
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
- PR.DS Data Security