A Multi-Function Device (MFD) is a device that provides centralized printing, scanning, copying, and faxing functionality; HSU has a number of these devices in offices around campus. MFDs are both network- and Internet-connected, so in many ways they function in a similar fashion to a computer. For this reason, and because they are multipurpose devices, it's vital that they are appropriately configured and managed to protect the information that passes through them.
It's easy to forget that these devices are much more powerful than the photocopier they most closely resemble, and their very multi-functionality creates a number of potential security risks. Without appropriate security configuration on the device, information may be inadvertently moved across the network or stored in plain text--which offers no protection against hacking and other unauthorized access. If Level 1 or Level 2 data passes through the device, the way that data is handled must comply with the same campus security standards as are applicable to computers that handle protected data. These standards are based on FERPA, HIPAA, CSU Information Security Standards, and HSU Procedures.
Any individual who handles sensitive data is required to understand and comply with requirements for protecting it. This is covered in the confidentiality agreement you signed when you first became associated with Humboldt State University.
Additionally, Work Area Administrators (department heads) are required to: