I work for a commercial printing company, and we're beginning to get a couple jobs labeled "High Security". Essentially this means that if any pictures/information/files/etc. of the product were released publicly it would mean tens of thousands of dollars lost for our customer.
While it's fairly simple to secure an area around a printing press (no one is allowed around it aside from machine operators, and all printed materials are covered at all times), I'm running into a couple of walls while the artwork is passing through our prepress department (prepping the artwork for the press. Lots of photoshop work and stuff like that). All files are prepped on Macs (running Snow Leopard)
What we have already implemented:
- Biometric locks on doors that access the server room
- Keycard locks on doors that access the prepress area
- PTZ cameras targeted at key positions
- SFTP file transfer (files coming from client to us. Files are immediately deleted off the FTP server after they are retrieved)
- No local file storage - files always stay on a flash drive which never leaves a manager's sight.
Things I'm still worried about:
Pictures being taken with mobile devices
- We've considered purchasing cell phone detectors, but they seem a bit flaky. They're only guaranteed to check at about ~20 minute intervals. Also, the ones I've found are either pretty junky looking (chinese resellers) or are $3000+
Local storage of files until we are no longer in "high security mode"
- We block off internet connections while under high security, but it is reopened once the job has closed. How can I stop people from saving the file locally and then posting it somewhere once the net connection is established?
Is mingling an SFTP server and an FTP server really secure?
- Right now our FTP server and SFTP server are actually located on the same box. Does this make our SFTP less secure, or are we fine?
What can I do to fix the above issues? Are there any other things I should be thinking about before I officially say prepress is secure?
This question was IT Security Question of the Week.
Read the Dec 16, 2011 blog entry for more details or submit your own Question of the Week.