All set for added Print & Telecoms Security

In a concerted effort to prevent data hacking and security cyber-attacks, the UK has become the first country in the world to introduce a new law called the PTSI (Product Security and Telecommunications Infrastructure) Act, which came into effect on 29 April.

The act has been designed to ensure that manufacturers and suppliers of connectable products comply with new minimum standards of security and help to further reduce attacks made on devices connected to the internet.

In the same way that the GDPR regulations, which came into force in 2018, made it the responsibility of anyone who handles data, of any kind, to protect it, it is now a legal requirement for manufacturers to protect customers even further from unauthorised data hacking and cyber criminals by accessing devices with internet or network connectivity and is not just limited to hardware devices but also to software.

Not only does this apply to consumer goods, but it also now applies to businesses who supply telecoms and networkable printers.

What does the PSTI Act mean for suppliers?

For a start, manufacturers will be banned from using and allowing weak, easily guessable default passwords like ‘admin’ or ‘12345’ and if a password is in common use, the user will be instructed to change it when they set up an account or a new password. This will help prevent major inconvenience and disruption to businesses, homes and schools.

Secondly, manufacturers and suppliers will have to share with end-users a minimum time frame in which they can expect to receive important support and security updates when a machine is no longer manufactured and if there are any changes, the supplier has to inform their customers as a matter of priority. This is usually between 5 and 7 years unless otherwise notified.

What are managed print product partners doing to ensure they comply?

At the core of its business, Commerce Business Systems’ range of multifunctional printer-copiers has been designed with extremely sophisticated security measures as standard but also offer a range of advanced security options too. However, Commerce Business Systems is working closely with leading manufacturers and are resellers of highly prized products from Sharp, Develop, Xerox and Lexmark.

Sharp is committed to ensuring its MFP and printer products comply with all regulations relating to cybersecurity and has established a dedicated Product Vulnerability Reception Desk, for customers to report any potential risks and issues. Sharp aims to ‘consistently deliver timely updates to its firmware, drivers, and associated software, and working towards eliminating potential threats to its customers’ security’.

Develop, in collaboration with its parent company, Konica Minolta, is ensuring that their printers and multifunctional range meet these security standards and that they have processes in place to comply with the Act’s requirements, by issuing their own statement of compliance covering aspects of banning universal default passwords and providing clear information about security updates to hardware and software.

Like most manufacturers, they are committed to a support period of 5 years after a product has been replaced by a replacement model.

What is more, real-time virus detection options such as Bitdefender™ can be installed to anticipate, detect, and instantly block even the newest threats before they can cause you any trouble.

Xerox have issued Security Bulletin XRX24-009, which states that the Xerox® B2xx/C2xx/B3xx/C3xx Series are ‘in conformance with the applicable security requirements set out in Schedule 1 of the PSTI Act of 2023 and remains compliant since April 29, 2024’. This statement of compliance is valid for Xerox’s standard support period of 5 years after a product is superseded.

Lexmark state that its range of products does not use default passwords and have issued a statement of compliance for their models to confirm they comply with the new act and have supplied a portal for customers to advise on security matters and explain how to report security issues on Lexmark machines.

How are Telecoms and VoIP suppliers working to comply with the Act?

The new Act will certainly mean that telecoms suppliers have to prioritise cybersecurity measures in line with a strengthening of the telecommunications and VoIP infrastructure in the UK. With the ‘Big PSTN (Public Switched Telephone Network) Switch-off next year, this is an ideal time for telecoms suppliers to reinforce security at the same time.

Telecommunications and VoIP suppliers will need to adhere to new minimum standards of security outlined in the PSTI Act. This could involve implementing specific security measures and protocols, and, in the case of manufacturers, there may need to be new standards set in the design, manufacturing, and distribution of their products and services.

The Act may require suppliers to undergo a process of security testing and certification measures to ensure that the products they supply meet the security standards. There will most certainly be more requirements for monitoring and testing connections which will mean more regular contact by the suppliers with their customers. Suppliers themselves may need to regulate their own chain of third-party contractors and partners and also monitor the changes in technology to assist with total security.

Commerce Business Systems partners with Telcoswitch who have been driving to improve network security and resilience by joining the global routing security initiative, MANRS (Mutual Agreed Norms for Routing Security) in 2022.

MANRS is made up of a community of like-minded companies, including Amazon WebServices, Google and Meta, with security at the top of its agenda. TelcoSwitch is now committed to continuing its security-focussed approach to building telecommunications solutions and delivering to the market which, along with all MANRS participants are subject to ongoing scrutiny by the initiative.

About Commerce Business Systems Ltd

Commerce Business Systems was established in 2002, in Bradford. Now, the company has offices in Leeds, Blackburn and Teeside and a team of sales and service professionals who are highly experienced in supplying exceptional business IT products, telecoms, office supplies, furniture and service to businesses, schools and organisations across the UK.

Commerce Business Systems values customer relationships and provides a truly personal service, which is achieved through working closely with customers, ensuring their requirements are met and helping their business to thrive. The new PSTI Act is one that Commerce Business Systems is already prepared for so managed print, telecoms and IT services customers can be safe in the knowledge that their data systems and communications are safe.

Contact us to find our more.