Unattended Printouts

Unattended Printouts

A page in the tray belongs to whoever reaches it first.

What Is Unattended Printouts?

A document sent to a shared printer sits in the output tray until someone collects it, and that someone is not always you. In this exercise you print a confidential pay review, leave for a meeting, and learn from a colleague that it was read before you got back. You report it, then print the same class of document again using Secure Print, which holds the job on the server until you enter your PIN at the device.

What You'll Learn in Unattended Printouts

Unattended Printouts — Training Steps

  1. Monday, 8:47 AM

    The partners' quarterly meeting starts at 9:00 in the room down the hall. You are at your desk in the open-plan office, coffee in hand, running through the prep list. The shared multifunction printer sits on the credenza a few steps away, where everyone on the floor collects their jobs.

  2. A Print Request

    An email from Diane Okafor, the managing partner, lands in your inbox. She needs the compensation review printed for the 9:00 meeting.

  3. Opening the Document

    You click the link in Diane's email. The People portal opens on the Partner Compensation Review. It lists every partner's draw, bonus pool allocation, and next-year adjustment by name.

  4. Sending It to the Printer

    Everything looks right. You click Print. The print dialog comes up with its usual defaults: the shared floor printer, one copy, Normal print. You confirm it the way you have a hundred times before, without a second look.

  5. The Page Lands in the Tray

    The printer wakes up and the compensation review rolls out into the output tray, face up, where the whole floor collects their jobs.

  6. 9:00 Sharp

    Diane appears at your desk. The meeting is starting and she needs you to take the minutes. You grab your laptop and follow her down the hall. The printout is still sitting in the tray. You will grab it on the way, you tell yourself.

  7. Back at Your Desk

    The meeting ran long. You get back to your desk to find a message from Priya Raman, an analyst who sits across the floor.

  8. Retrieving It, Too Late

    You hurry over to the printer. The compensation review is exactly where Priya left it, face down beside the tray. You pick it up, but the exposure has already happened. It was readable, in the open, for ninety minutes.

  9. What Actually Went Wrong

    The document itself was handled correctly right up until it printed. The failure was leaving confidential output unattended in a space everyone shares.

  10. Calling IT

    This is a data exposure, not a lost page. Colleagues who should never see partner pay have seen it. You call IT Support to report it straight away, before anyone else has to.

Security Framework Coverage

CWE

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CIS Controls

  • CIS 3 Data Protection
  • CIS 14.5 Train Workforce Members on Causes of Unintentional Data Exposure

NIST CSF

  • PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
  • PR.DS Data Security