IDMi:071

Keeping You Informed Since 1969 www.idmionline.com Decem ber/January 2011-2012 : Issue 71 ISSN Inform ation + D ocum ent M anagem ent international

2 0 4 0 - 3 0 q 7

The World Of Online Information

The NEW 7750 M icrofiche S can statio n fro m Wicks an d Wilson

The only m icrofiche scanner to harness th e p o w er o f NVIDIAŽ CUDA™ techn o lo g y, d eliverin g d ram atica lly increased processing p o w er fo r th e u ltim a te in im age q u a lity. Designed w ith o u t com prom ise.

Wicks and Wilson Limited Electronic Imaging and Micrographics

Morse Road, Basingstoke, Hampshire, UK Tel: +44 (0)1256 842211 Fax: +44 (0)1256 840997 Email: sales@ wwl.co.uk

W eb: w w w .w w l.co .u k

. L E T T E R j g > A

I U

Hello and welcome to issue 71. This print issue takes through Christmas and into a New Year, can you believe it! “Already” I hear you say, and “where's the fun Christmas themed cover like we had last year?!”

tried listing them all but I'm seriously running out o f space! So have a wonderful December and we'll see you again at the end of December for the next digital issue and a fun cover from our Art Director Ross for you all to enjoy.

Well due to the timing of the Online Information Show we are going with that as the theme for this issue, but don't miss our next digital issue which will have a cover that will give you that comic relief I'm sure you all need at this stressful yet joyous time of year.

Angela Baker-Cameron

So Online Information is the name of the game for most companies at the moment. Especially the larger organisations with more information storage requirements than you can shake an “out of the box” copy of SharePoint at!

SharePoint has been developing since the nineties and since it was first launched in 2001, It has evolved through tim e to SharePoint 2010. On page 22 we have the first part o f an interesting series o f articles on the subject by Steve O' Donnel who is a SharePoint Implementation Consultant. Particularly useful for those o f you who may be considering implementing SharePoint.

Although SharePoint is not the only Enterprise Content Management (ECM ) System out there, Documentum, Filenet, and Opentext just to name a few., and It depends on the individual needs of every company to determine which is the right choice.

05 13 07 13 07 32 31 02 21

Manually Auditing Firewalls - the big hidden cost!

Microsoft*

SharePoint

Angela BakerCameron r \ f \ £ \J

Chief Editor

Interdetermination in a Sharepoint Environment

BA If you would like to submit an article or case study please get in touch by emailing us at: rosscameron@idmionline.com or johnbaker@idmionline.com

OV 26

Game Over or Not. . .

The Hackers are on the Inside

To subcribe to IDMI please visit our website at idmionline.com or by emailing the editor a t : rosscameron@idmionline.com For advertising enquiries please get in touch by emailing : rosscameron@idmionline.com or johnbaker@idmionline.com Or contact us by telephone on : (+44)01330 824826

ADVERTISERS A-Z

But Online Information 2011 is not just about ECM, it covers so many aspects o f information management and is relevant to such a large number of companies and organisations that I couldn't possibly list it all here. If you are not reading this at the show then check out the shows website at www.online-inform ation.co.uk.

£ \J

C-Cube/OIT Doculex Genus Group ibml Micrographic Data Nextscan ScanMicrofilm Wicks & Wilson Zeutschel

IDMi SPECIFIC CONTENT 25 B2B Marketplace 28 Diary Dates 2010/11

IDMi Equipment Guides: 15,16 Doc. Scanners to A3 17 Microfilm Scanners 18 Microfilm Writers 04-08 IM World 29 PENultimate Cover Photograph: Courtesy of

So to all of you, Happy Holidays! I w w w .idm ionline.com

4

Compliance vs. Security: The Multiple Dimensions of Corporate Espionage

Kentoh Letter From The Editor

Scan to iPhone and iPad

Fujitsu subsidiary PFU is the first vendor to offer Scan-to-iPhone and Scan-to-iPad software functions connecting paperbased documents directly to the mobile Apple world. With the new software enhancements, PFU will address the ever-growing number of iPhone and iPad users who require access to their data, including electronic images, on their mobile or tablet device. Documents can be easily transferred from their PC or Mac directly to their iPhone or iPad. All they need to do is click on the new ‘Scan-to-Mobile’ button in the ScanSnap software’s Quick Menu. But that's not all: They can now also scan contact data and documents into SalesForce CRM, SalesForce Chatter and SugarSync Personal Cloud applications - in a matter of seconds. The free software updates are available for the scanner models ScanSnap S1100, S1300, S1500 and S1500M, to new as well as to existing customers. The new functions demonstrate PFU's continued investment in the emerging cloud solution offerings that it started with the launch of the ultra-portable ScanSnap S1100 model in early 2011.

More: www.Dfu.fuiitsu.com/en Palmetto Agfa Committment

Agfa Healthcare announces today that Palmetto Health of South Carolina has renewed its commitment to Agfa HealthCare's IMPAX solution as the facility's PACS (picture archiving and communication system). Specifically, the facility installed IMPAX 6.5, the latest software version, which is based on customer feedback and engineered to streamline workflow and provide enhanced image processing capabilities for busy radiology departments.

More: www.aafahealthcare.com Carewatch Advanced 365

Carewatch, one of the UK’s leading providers of home care, has selected Advanced 365 as its IT outsourcing provider.

Advanced 365 will be hosting Carewatch's IT infrastructure in a private cloud environment. The contract is £1.1 million over a five year period and the go live is expected by the end of 2011.

The decision to move from internally managed IT to an outsourced IT service is driven

by Carewatch’s need to have a flexible IT platform to support growth and the organisation’s desire to be at the cutting edge of care delivery.

More: www.advancedcomputersoftware.com

I

NOTE: Most news items have been edited for content and/or brevity.

Crowley Acquires Wicks and Wilson Limited Christopher Crowley, president of The Crowley Company, has announced the acquisition of key competitor Wicks and Wilson Limited.

Based in Hampshire, England, Wicks and Wilson manufactures and distributes the Scanstation-brand microfilm, microfiche and aperture card scanners.

States Crowley, “This purchase will allow us to broaden our microform offering, strengthen our international presence and ensure that we continue to be at the forefront of microform capture technology.” He continues, “Wicks and Wilson is a company with a strong industry reputation and excellent R&D, fitting very well into our business model. It was an honor to be given first look.” Wicks and Wilson owners, Bob Randall and Ian McMinn, note that once the decision to sell had been made, contacting Crowley was an obvious choice.

“We’ve been competing against each other for years,” notes Randall, “and Crowley has earned our respect. It was important for us to select a company which would continue to nurture the business started in 1973.”

ASSIMILATING THE PRODUCT LINE

In 2003, Crowley purchased Mekel Technology, manufacturer of the world’s first microfilm and microfiche scanners. This move added manufacturing capabilities to the one-time Mekel distributor and opened the door for significant growth. Today, the Mekel product line is considered to be a premier digital scan product, suitable for converting very highvolumes of images. The brand also carries an entry-level device which processes fiche, film and aperture cards in a single unit at an affordable price. The addition of the Wicks and Wilson “Scanstation” brand gives Crowley another quality product line. “Just as we did with the Mekel Technology brand of products,” says Crowley, “we will keep the Wicks and Wilson name. Both of these brands are wellknown within the archival preservation and service bureau industries for their quality, performance and dependability.”

California, The Crowley Company’s new UK site will be the platform for international growth, says Crowley. “Our Mekel brand is sold worldwide, as is the Wicks and Wilson brand.

Having offices on two continents will allow us to take the next step in our expansion of services and technical support by allowing us to create production efficiencies and to solidify an international network of partners.”

Crowley Vice President of Sales, Matthew McCabe comments that “I and several others on the Crowley staff have represented Wicks and Wilson scanning equipment in the past. It’s a product line we know well and one that we’re very comfortable offering alongside the Mekel Technology range of products. Wicks and Wilson offers a progressive scanner range and is very well-known for its reliability, performance and advances in scan technology.” ■ More: w w w .th e c m w le v c o m D a n v .c o m

CROSSING THE POND

w w w .w w l.c o .u k

Headquartered in Maryland with a manufacturing facility in

It's not hard to find a cowboy in Rochdale, says Cryptzone Commenting on revelations that Rochdale council has been censured by the ICO after losing an insecure USB stick that contained the personal details of 18,000 residents, Cryptzone says that the sad fact about the case is that it could so easily have been prevented.

According to Grant Taylor, VP of the IT threat mitigation specialist, controlling data on USB sticks can easily be achieved using a combination of encryption, backed up by enforced security policies to ensure data compliance.

“Using this belt-and-braces

approach means you have policy enforcement software allied with a secure USB stick environment where data has to be moved using this type of hardware. You can also allow controlled access to the data on secure remote basis,” he said. “Taking a centralised secure silo approach to data leak prevention is actually the preferable methodology, as it's perfectly possible to have multiple storage systems across different offices, where a large number of employees require access to a constantly updated file database. But whichever security

IM World: News from around the globe

methodology is used, the important thing to realise is that these systems are now easy-to-use and transparent as far as the end user is concerned,” he added.

The Cryptzone VP went on to say that the Rochdale council data loss is quite significant a§ it amounts to 8.7 per cent of the 206,000 population of the city, although with just over 10,000 employees, the council clearly has a large number of staff handling a lot of data on a daily basis.

M o re : w w w .c rv D tz o n e .c o m

www.idmionline.com

i n f o r m a t i o n

OVERLOAD

Do you want to spend time searching or finding Do you want compliance Do you want process efficiencies

OITUK Ltd., specializes in providing C-Cube Electronic Document and Content Management & W orkflow solutions, based on the C-Cube software suite. Systems scale from small departm ental applications to large enterprise -wide solutions and include: the C-Cube Portal, Electronic Forms, Content Searching, and C-Cube Electronic Document & Records Management System (EDRMS), offering specialised solutions, including: • Legal Compliance

• Invoice Capture and Authorisation

• Health Records M anagem ent

• Local A uthority Applications

• Law Enforcement Applications

• Human Resource M anagem ent

• Inform ation W eb Portals

The key to all OITUK solutions is integration w ith your business to ensure th a t inform ation is delivered on tim e and to the right place. OITUK Ltd has provided integrated solutions over the last 15 years using the follow ing underlying technologies: • Docum ent M anagem ent

# ccubesolutions

•W o rk flo w

•

• Web Portal & XM L Integration • COLD / Microfiche Integration • Electronic Forms Processing

13 Diamond Court Opal Drive, Fox Milne

• Electronic Records M anagem ent

Milton Keynes,

•C ollaboration Facilities

MK 15 oDU

inD m

DOCUM ENT M A N A G E R

AWARDS

2 C ^I

the information people ccubesolutions.com

O

W IN N E R

tel: 01908 677752 fax: (01908)679444 email: sales@ccubesolutions.com web: www.oituk.com

Canon Demonstration at AFP Conference

Canon USA Demonstrates imageFORMULA at Conference Canon U.S.A., Inc., a leader in digital imaging, showcased its award-winning imageFORMULA solutions at the Association for Financial Professionals (AFP) Annual Conference, which took place November 6-9, 2011. The exhibit at the Boston Convention and Exhibition Center, included the recently announced imageFORMULA DR-M160 document scanner, a compact and powerful scanner ideal for financial institutions and corporate environments alike.

“Canon has made great strides in addressing the needs of treasury and finance professionals in any industry," said Jim Rosetta, vice president and general manager, Imaging Systems Group, Canon U.S.A. “At this year’s show we are excited to demonstrate Canon’s data capturing solutions that can help create efficient workflows, resulting in productive operations and reduced costs.”

More: www.canon.com Game Group Appoints Greenlight

GAME Group pic (GMG.L), Europe’s leading specialist PC and video games retailer and the only company in Europe in its sector to list on the London Stock Exchange, has engaged leading specialist search and social marketing firm, Greenlight, as its search engine optimisation (SEO) and Paid Media agency.

The appointment follows a competitive pitch process which saw Greenlight win.

GAME Group aims to be as dominant a player in the online space as it already is on the high street. Greenlight will be working towards cementing the Group’s position as the leading gaming retailer in the UK, drawing on its clear understanding of the Home Entertainment sector.

“We have ambitious plans to treble online revenues in the next three years”, says Steve Arbon, GAME Group’s E-Commerce Acquisition Manager. “Greenlight has a stand out reputation for its quality of work and delivery of results.

More: www.areenliahtsearch.co.uk

Don't fo rg e t....

There's a digital edition inbetween the print issue months of IDMi. More: diaital@idmionline.com

NOTE: Most news items have been edited for content and/or brevity.

ZeroPC2.0 Content Navigator for the Cloud Technology has given people a plethora of digital devices, Web services and social media sites with many logins and varying user interfaces.

As a result, our digital content has become scattered and it can feel overwhelming to find, manage and share all of our files, documents, emails, photos, videos, music and social content. The new ZeroPC2.0 (www.zeropc.com) is a free, powerful content navigator for the cloud that enables people to regain control of their digital lives by connecting cross-platform content, making it accessible using a browser, and easy to search, edit, move, share and backup all from one secure place with one login.

ZeroPC2.0 expands the functionality of content searches by leveraging external storage services and social sites, plus friends' content regardless of where it is stored. (See ZeroPC(TM) Video: http://vimeo.com/31356207.)

By comparison, people have had to use multiple search methods and sites requiring numerous clicks and logins to gather content - Google for general Web searches but not personal data, or Facebook only to search for friends and groups but not content.

ZeroPC2.0 features a universal search engine that lets users enter keywords, tags, names or places to

navigate through all files, folders, documents, photos, videos, music and typically hard-to-find social content stored in popular sites including Box.net, Dropbox, Evernote, Facebook, Flickr, Google Docs, Instagram, Picasa and SugarSync. All of the user's digital content from these sites is managed under one digital roof in their ZeroPC cloud account.

ZeroPC runs on popular browsers including Chrome, Firefox, Internet Explorer and Safari.

New Tablet Apps: A new ZeroPC tablet app, "ZeroPC Cloud Navigator"(TM), is available now in the Android Market and will be available shortly for iPad in the App Store.

To illustrate this universal cross-platform search, a ZeroPC2.0 user may want to find any content related to Hawaii. They simply enter keywords into ZeroPC's builtin search bar and ZeroPC will navigate through all of their content and messages, plus their friends' content pertaining to Hawaii. The combined search results may include trip itineraries, emails, maps and sightseeing suggestions from friends' Facebook, photos and videos.

Without leaving ZeroPC, users can select and view content from its original site, edit, move, share or backup single folders, or do a

comprehensive backup.

ZeroPC2.0 provides users with 1GB of free general cloud storage, plus up to 59GB of integrated access from popular cloud storage services. Paid users can create one-time or recurring backups of their cloud content and can easily restore content.

ZeroPC2.0's intelligent Cloud Dashboard gives users a valuable tool to analyze their content by category including documents, photos, music, videos and others, plus see available free space. The Cloud Storage Analyzer gives a consolidated view of storage quantities in external services. Users can simply drag and drop their content to manage between services.

"After users decide to move their valuable content to the cloud, it is essential that they have powerful tools for protecting, managing and sharing the data they create and store so it is safe and accessible whenever and wherever they need it," said Young Song, Founder and CEO of ZeroDesktop(TM), Inc. "We are continuing to enhance ZeroPC with innovative features and portability across additional platforms giving users enhanced productivity, confidence and enjoyment in leveraging all that cloud computing has to offer." ■ More: www.zeroDC.com

Avis Extends EDM Contract EDM Group, one of the UK’s leading information management companies, has been awarded a contract extension by Avis Budget EMEA Ltd. The three year deal, which is worth in excess of £1.8 million, will see EDM process and securely store more than 45 million customer documents over the contract period.

Commenting on the contract extension, Chris Soanes, European Relationship Manager - Customer Billing & Document Systems for Avis Budget EMEA said: “EDM’s integrated, panEuropean system allows Avis Budget EMEA to seamlessly store and retrieve 15 million customer documents a year.

The system is not only straightforward, it’s also 100

IM World: News from around the globe

per cent reliable, giving us absolute confidence that we can continue to deliver a highly efficient customer service. As such, they are an integral part of our business and we are delighted to extend our contract with them.” ■ More: w w w .e d m a ro u n c o m w w w .a v is .c o m www.idmionline.com

ImageTrac-Lite

= _ ib m l

P ro d u ctio n S canning at D esktop S ca n n e r P ric in g !

Why buy a desktop scanner when fo r about the same price you can get the perform ance of a high-end production scanner and slash your capture costs by an average of 4-0%?

•

ROI typically less than 18 months

•

Scan up to 17,600 pages per hour (35,200 images per hour)

•

Only 1 scanner operator required

•

Gain scalability for peak and seasonal work or unexpected spikes in volume

•

Improve conformance with SLAs

•

Enables value added scanning services

•

Reduce document preparation and paper handling

•

Gain a competitive advantage

•

Purchase, lease and rental options

lmagcTr«c-Lit« with Run-out and options

M ore Inform ation?

To receive the ImageTrac-Lite brochure please contact our team by phone or email.

Call +66 (0)1683 569818 Email eurosalesiaibml.com www.ibml.com

Document scanning. Done right/'

t +46 10) 1683 569818 e curosalesflibmlcom www.ibml.com

'* b m

Public Access Digital Capture Book Scanners The book2net Kiosk and Spirit are revolutionary book scanners that are replacing photocopiers and traditional scanning equipment across the U K & Ireland.

Ideal fo r use in universities, libraries, archives, special collections, museums, law firms, schools and anywhere with books, bound media or walk up scanning requirements.

These A2 and A 3+ are great for:

-

Public Use Book Preservation Creating Digital Scans High Resolution Quality O utput Replacing Photocopiers The Environment

W e are offering Free On-Site Demonstrations allowing you the opportunity to scan your books and see how this modern approach can enhance the service you provide.

Call us today on 024 7625 4955 o r email us on info@genusit.com.

Main installations include: The British Library The Wellcome Trust The National Library of Scotland BP Archives National Maritime Museum Public Record Office of Northern Ireland Borthwhick Institute - University of York University of Sussex University of Plymouth

Hackers Targetted 30 Chemical Companies

Commenting on reports from Symantec that hackers targeted nearly 30 companies in the chemical industry this summer with the intent of stealing sensitive IP (intellectual property), Lieberman Software says that this latest cyber crime wave cries out for privileged identity management technology.

According to Philip Lieberman, President and Chief Executive Officer of the identity management specialist, while Digital Rights Management (DRM) is often proposed as a panacea for IP security, the reality is that the types of attacks identified in Symantec's research use a ‘spear phishing’ methodology that carefully targets the email recipient and fools them into compromising their IDs and passwords.

“Spear phishing pierces DRM systems like a hot knife cutting through butter. Privileged identity management, on the other hand, limits the damage that compromised account credentials can cause, and can actually stop hackers from gaining access to private data following a security breach,” he said.

“The fact that these firms include Fortune 100 companies that undoubtedly have experienced IT security professionals working for them - and yet they were still victimized by hackers - tells us that sophisticated cyber attacks stand a good chance of getting through the defences that large corporations have in place,” he added.

Against this backdrop, the Lieberman Software president went on to say, privileged identity management controls can act as a last line of defence against hackers gaining access to administrator level accounts, preventing the intruders from effectively gaining full control over an organisation's IT resources.

Put simply, he explained, with a privileged identity management system in place, should hackers ever gain access to one of more user accounts, the intruders will only have limited, localized rights and will encounter cryptographically complex administrative passwords that are impractical to crack with today's technology.

“The fact that these victim organizations are developing new materials for military vehicles, advanced manufacturing infrastructure, and other strategic technologies is very worrying."

More: www.liebsoft.com

IDM i:071.08

NOTE: Most news items have been edited for content and/or brevity.

Iron Mountain Opens Europes Largest Document Scanning and Indexing Centre Last month, Iron Mountain, the information management company, announced that it had opened one of Europe’s largest document scanning and indexing centres to help organisations across Europe protect, process and make the most of their information in the face of increasingly stringent national and EU regulation.

The centre in Stafford (UK) expands Iron Mountain's network of European imaging facilities to 56 in 19 countries.

Using the latest technology, the centre provides a suite of document management services for organisations of all sizes, from across all business sectors and European locations. With a production environment of just under 25,000 square feet, the centre can deliver up to 250 million documents per year at full capacity. Customer mail, including items such as invoices, application forms and HR files, comes directly to the site where it is sorted, prepared and digitised, with the required data pulled out and delivered in a format that is ready for customers to use

in their systems. The strictest security features are built into the site, allowing Iron Mountain to process highly sensitive and confidential information. All the services provided are fully compliant with European national and international law.

“According to IDC, companies waste between five and 10 per cent of annual revenue on creating, sharing, searching for and protecting paper documents,” said Mark Duale, President of International at Iron Mountain. “This is because the use and distribution of paper documents is almost impossible to track. Filing them uses up valuable space and resources, and they can easily be lost or damaged.

The case for scanning is therefore overwhelming, and many businesses are beginning to digitise their documents.”

For many organisations, the step to wholesale digitisation is daunting. Fears exist about information security and access, the impact on paperbased business processes,

compatibility with paper and electronic archives and the minefield of rapidly changing national and European regulation.

Iron Mountain’s approach builds on 60 yearp of expertise in operational management and compliance.

The new scanning centre offers customers more than just a hub for digitising documents. It also allows them to extract the full value of that information, whether it is customer details for financial processes or valuable intellectual property.

This ensures that information management becomes a vital business process.

Services provided by the new centre include logistics (secure document collection and delivery); intelligent scanning; information extraction, indexing and validation; secure storage; rapid data retrieval (for example for legal disclosure or auditing purposes); and end-of-life, legally compliant shredding or destruction. ■ More: www.ironmountain.co.uk

EDM:Sala International Join Forces In September, Sala International and EDM Group announced that they had merged, creating one of the UK largest information management companies. The resulting company, which trades as EDM Group Limited, are leading providers of information and document

management services, with broad and deep capabilities in areas such as large scale document digitisation, online document hosting, digital mailroom records management, printroom, and BPM solutions delivered using a SaaS model. The merger brings together two

companies with an excellent fit, which will allow the combined customer base to access a rich, coherent portfolio of services from a single, proven, supplier. ■ More: www.edmaroup.com www.sala-international.co.uk

Opengear IM4200 Used by CooperVision Opengear, provider of next generation console server and remote management solutions today announced that CooperVision, one of the world's leading manufacturers of soft contact lenses and a unit of The Cooper Companies, Inc. (NYSE: COO), is using the Opengear

IM4200 in several major locations around the world and is planning to provide console connectivity via deployment of the Opengear products in all CooperVision datacenters and wiring closets.

“We are impressed with the functionality as well as the

IM World: News from around the globe

performance of the Opengear IM4200. We use it to do things we couldn’t do before with other products,” said Alexander Metlitsky, Manager, Global Network Services, CooperVision. ■ More: www.ooenaear.com

www.ldmionline.com

online inform ation

2011 29 Nov -1 Dec National Hall, Olympia, London

Q | Follow @Onlinelnfo_expo #onlinel 1

ONLINE INFORMATION 2011 Join thousands o f visitors from around the w orld and take the o p p o rtu n ity to discover

new suppliers; discuss and negotiate new deals with existing providers and find out about the new products and services they are launching.

Join us in our new venue, the National Hall, Olympia for: ■ More than 150 international exhibitors displaying a wide range o f cutting edge products, services and technologies ■ A free educational seminar programme which includes sessions on Content Management, Enterprise Search, Business and Legal Information,

Online Information 2011 covers

STM Information, ePublishing & eBooks, Library Management and Social Media Marketing plus information masterclasses, career development talks and independent case-studies ■ The Online Information Conference runs alongside the exhibition. Learn from our expert speakers on the hot topics o f the day including opening keynotes from Craig Newmark, Founder o f Craigslist and Rachel Botsman, Author o f ‘What's Mine is Yours The Rise o f Collaborative Consumption'

For fu ll inform ation o r to register fo r FREE exhibition entry visit

www.online-information.co.uk

An -v \nas\vemedia event OFFICIAL SHOW PUBLICATIONS

ii...”W.™..,..,.,..

R computing ■

GLOBAL BUSINESS INFORMATION FORUM SPONSOR

XML PAVILION SPONSOR

EUROPEAN LIBRARIANS THEATRE PARTNER

EBSCO

BUREAU VANDUK

LEGAL INFORMATION SPONSOR

M a r k L o g ic

EVENT SPONSOR

LexisNexis-

SUPPORTED BY

fiaiim

Education Partner

F ir e e P in t*

ariD ^ A

ALPSP

asl b

WKU;

The Information Architecture Institute

O b lm a

e tIK X society

C-USUC,

cilig ©

nvb

^SLA

UKe/G

Com pliance vs. Security: The Multiple Dim ensions of Corporate Espionage

By Michael Podszywalow, MBA, CISSP, CISM, CISA, CEH. Speaker at ISACA’s ISRM conference You’ve spent months fixing the red items on an internal audit report and just passed a regulatory exam.

You’ve performed a network vulnerability assessment and network pen test within the last year and have fixes in place. You’ve tightened up your information security policy and recently invested in a security information and event management (SIEM) solution. You’re secure, right?

Put yourself in the shoes of a criminal. He knows that most security programs focus on regulatory compliance. He knows that IT departments have limited budgets. He also knows that you must defend against an almost unlimited amount of attack vectors, while he just has to find one way in.

How do you protect against a

IDMi:071.10

sophisticated, motivated criminal?

A professional spy who has targeted your company’s trade secrets? A skilled insider with a specific purpose in mind? These types of people know that information comes in many forms, not just electronic, and they are trained to exploit any vulnerability.

An effective information security program must incorporate more than just traditional pen tests and vulnerability assessments.

Corporate espionage is on the rise for multiple reasons: the down economy, frequent job changes, and even governments that boost their economies through acquisition of trade secrets. In most cases, the end product is not as valuable as obtaining the means of production, the research and development, or the “know-how.” This type of information will help to cut down on

C om pliance vs. Security

development costs and aid in the long-term production of a particular good. In the end, a company must get the best product to market first, at the best cost, through maneuvering around the competition.

Stealing information is one of the oldest forms of gaining a strategic and competitive advantage. For example, China enjoyed a monopoly on silk production for hundreds of years. At times, silk was more valuable than gold. The Chinese closely guarded the secret and punished theft by death. But around 300 A.D., Nestorian monks managed to smuggle the coveted silkworm eggs out of China in bamboo walking sticks. Simply, they found one attack vector that worked, and they broke the Chinese monopoly. ►

ww w.idm ionline.com

I

m3 Since 1989

ASIA'S LE A D IN G MICROGRAPHICS & PRESERVATION

SOLUTION PROVIDER At Micrographics Data, we understand the importance of your documents.That's why we use only the best technology and solutions to preserve your heritage.

Contact us for document preservation solutions.

archival

AW 1 Series

EXPM6

Extremely fast easy-to-use I6mm/35mm Colour Archive Writer. Archiving digital files onto colour, greyscale and bitonal microfilm with extremely high optical resolution o f up to ISOlp/mm.

colour

greyscal*

Anoxic Disinfestation Chamber Ecological, user-friendly disinfestation chamber for effective & long-lasting preservation

bi-tonol

microfilming microfilming microfilming

and

Visit www.md.sg or callus at (65) 6472 7255.

s fh MICROGRAPHICS DATA PTE LTD 115A Commonwealth Drive #02-16/02-10 Singapore (149596) Tel: (65) 64727255 Fax:(65) 6475 1436 Em ail: sales@md.sg Website : www.md.sg

AO-Scanner Plus

ST ViewScanÂŽ

Newspaper Micropublisher

State o f the art scanning system for digitizing books (up to A I) and maps (up to AO) with true optical resolution o f up to 600dpi (optional 800dpi) in colour, black/white & greyscale.

Fully-integrated Microfilm crossoverm Digital Film Viewer & Scanner

Global exclusive Singapore Press Holdings newspaper micropublisher for The Straits Times, The Business Times etc.

fMMT TO A D V E R TIS E BU T D O N ’T HAVE AN A D V E R T ?

IDMi now offer a design service!

Com petitively priced Bespoke advert design in line with your brief.

Use your advert as many times as you like in IDMi print and digital issues For prices for quarter, half and full page advert design contact: design@ idm ionline.com

◄ Espionage happened in the past, happens today and will happen tomorrow. The only things that change are the techniques that are applied. Because of technological advances, many companies predominantly focus on the electronic dimension of information security.

However, this approach indicates that these companies don’t understand the problem.

The Four Dimensions of Information According to security expert Ira Winkler, information exists in four dimensions: paper, visual, oral and electronic. Professional spies can obtain information through any of these dimensions, so deploying security technologies alone will not sufficiently secure your company. An effective information security program must protect the four dimensions of information using physical, logical and operational security measures.

To see why, again put yourself in the shoes of a criminal. With your deviant mindset, you are willing to work inside or outside of technology and find different ways to get information.

Remember the old James Bond movies? Sean Connery as Bond would pull out gadgets whose simplicity is comical now. Shoes with secret compartments, books with hidden tape recorders and voice changers. In Goldfinger, Bond even wore a wetsuit with rubber duck on top for camouflage. Don’t underestimate the power of these low-tech devices that assist in collecting non-electronic information.

Besides the cutting-edge technology we often worry about exclusively, our companies are at risk from ties with hidden cameras, audio bugs, removable storage devices, USB gadgets, Wi-Fi tools, surveillance technology, hardware key loggers with built-in processors and Wi-Fi capabilities, and monitor loggers that look like simple extension cables and record complete snapshots of a user’s screen. A simple web search reveals that most of these items are relatively inexpensive and can be acquired online. Also, don’t overlook the copier, fax machines and other “old” technologies as a source of information leakage.

IDMi:071.12

The Professional Attacker A motivated professional attacker can be almost impossible to stop using traditional security measures. Such an attacker usually is:

to take advantage of whatever vulnerabilities appear. Doing this will allow you to see your exposures and determine the best countermeasures for your organization.

Well-educated and motivated Knowledgeable of business operations and the worth of particular intellectual property Trained in social engineering, including multicultural awareness, languages and the ability to take advantage of social traits to glean information Resourceful, creative, persistent, and detail-oriented Capable of using diverse skill sets and contacts Able to use the most effective skill / technology coupled with lowest risk of detection

Problems with Traditional Assessments Unfortunately, too many companies rely on their timely network vulnerability assessments and traditional pen tests to measure the effectiveness of their security programs. Although traditional vulnerability assessments and pen tests are integral parts of most security programs, they do not> mimic what attackers actually do. From start to finish, here are some reasons why a pen test alone does not accurately assess your security program:

"Espionage happened in the past, happens today and will happen tomorrow.

The only things that change are the techniques that are applied".

Backed by sufficient finances to go after target in a systematic and methodological way.

A true opportunist and master of evasive tactics Extremely difficult to secure against You may notice that tech skills are not prominent on this list, because they can be outsourced or acquired. Other factors, particularly the flexibility to use the most effective methods, James Bond-like as they may be, are more important to the professional attacker’s success. Ultimately, the attacker’s goal is to launch a “precision strike” against the company and avoid detection at all cost. For security professionals, it is critical to put yourself in the shoes of a criminal and think like they do. Sophisticated criminals often take the path of least resistance to get what they want.

They are trained opportunists skilled

C om pliance vs. S ecurity

1) Your company issues a pen test RFP. Your company takes the best bid.

2) The salesperson presents your company with a contract that disclaims all warranties and stringently limits the tester’s liabilities along with other written stipulations.

3) Your company gives the tester an IP range and a critical blacklist of devices and servers out of scope to reduce the possibility of something going wrong with the scan. This information is never available to attackers, who thus have more attack vectors. Sure, it is trivial to obtain the network IP range once there is access to the network, but again, the attackers are not given that information up front. Nor do they “blacklist” or label certain devices out of scope. It’s all up for grabs.

4) Tester generally uses an automated scan and in many cases fails to verify the results with a manual test.

5) Tester presents draft report to the IT department, which has a certain amount of time to “fix” the issues.

6) Tester rescans and gives a clean, formal pen test report to the IT department (making the company feel good about its security posture).

7) Board of Directors gets the clean report and thinks the company is in good shape. ►

w w w .idm ionline.com

1

OSCAR

This is how you spell digitalisation.

\ ca' W

t>e°P^c ol

n peop'e> Under the OSCAR (OMNI Software for Connected

, 2•• inM **'"

Applications and Resources) umbrella brand, the digitalisation experts from Zeutschel provide

* * * & * B& -

‘ e o fc^,^a T ted ^ ittace etc a r eT e > -,0{te' ,... te«tes*'" v.e^ aW \? a« o b j e c t oiectei . eCtedbY

you with a comprehensive package that includes

____ 0 aitic\e-'s

software, a range of services and services for digital libraries and archives of all sizes.

nCcted A!’’ ViensWe

U'-‘ I

. o\ane' :<*i°n ft ^v, \tcY>r0'e' /ie nVortogf°J ’ 0rth - + i\og tapW -p h to .fr.Gk. * ca«v* . o \otc < i „ r ds v n,th 'u * e i «»IW .,»nieO accep«°

the ^

cU\w ra\ a*

r, „tb£t va iu a^

te{acts>l?

i

includes-

-„tnenV. ols omtuscan naS« ytetraes

.

^

booV xoV

If you would like to know what OSCAR can do for your institution, send us an email:

?etfect

Qua0tum

oscar @zeutschel .com

oV,Qua'

Y - ^ o ^ W '01'

'£-f ®*r£ 2 & *~ V ^ ^ U /irkOt'e°<

. tettets < ,tat'On ptinteo ' ’• • ^ 5U t t e n ° t ^ eswdv

f? *^ s S w,s

www.kraas-lachmann.com

L nedv.d*sPe -• • V . telat'US1 ,uAat,adj n .,rP ertaiwo\ec r thO

t ^

s'ol" o f v '^ te ?t°T o5i"

nveW*

. , at e f c

osdJ

dou-usW °accoS^t t ^ J toa*eon’ ^ vvhness^ . a n d ^ P mC

decreas'"fc

AhV'UcteaS ^amountsot re liL n 0u«'atua«' the b -.to 1

,o>nt5

ibeUefe'

ZEUTSCHEL

*r~S2z?!Z£~'~ .^rthoft°na; ^;on

www.zeutschel.com/oscar

ZEUTSCHEL - The Future of the Past.

Conversion Service Providers Subscription-Based Cloud Offering of Archive Studio 100% secure, browser-based electronic document management system for any business environment seeking Instant Document Access without a significant IT investment.

• Collaboration • Email Archiving and Compliance • Customized Workflow and Records Retention • Knowledge Management

Why Partner With DocuLex to Offer Archive Studio Software as a Service?

Become a DocuLex Dealer Partner O ffer our award-winning Archive Studio” docum ent

• Give your customers a complete hosted solution for managing documents after the conversion process • Increase your recurring revenue and customer retention • Attract new customers and add value to your existing customer base • DocuLex provides direct support to customer for anything related to software use

◄ Reasons this system does not solve your company’s problems include: 1)The pen test parameters make it difficult to imitate a true electronic attack.

2) Because the IT department has time to fix the issues brought up in the first pen test, the company fails to develop a formal change/patch management process.

3) The lag time between the test and the formal report received by the board may invalidate the results and provide a false sense of security.

4) Ultimately, the test fails to mimic an actual attack, which uses a combination of social engineering, physical and electronic methods, often orchestrated by a team of people involved in the attack.

5) The company’s board and other stakeholders will not care about a clean network pen test if an attacker enters the building and, through a combination of social engineering and other low-tech gadgets like the hidden camera tie, steals your protected information.

Protecting Against Corporate Espionage In today’s regulatory environment, information security managers must comply with industry-specific, state, province and federal regulations (regulations that often focus on customer information and privacy).

As discussed previously, security programs that focus on privacyrelated compliance requirements do not sufficiently protect your company’s assets, i.e., shareholder value. Your company is not secure just because you have checked off the items on the compliance list.

Step 1 The first step to effective defense is to identify: 1 ) information that, if lost, would critically harm the company, and 2) the value of that information to your company and its competitors.

These are your “crown jewels” and should merit the best defenses.

Information security managers must be able to identify company intellectual property (IP), the location

IDMi:071.14

where the IP resides, and the value of the IP, so they can protect and control who has access to this information.

Then perform a risk assessment to identify existing security vulnerabilities to those crown jewels.

As a side note, it is also important to establish a comprehensive list of data items your organization owns or processes, including an inventory of all IP that could affect revenue or reputation. Involve stakeholders from across the organization to identify the information.

Examples of such information may include: copyrighted material, patents, trademarks, operating procedures, user manuals, policies, memos, reports, plans, contracts, source code, recipes, manufacturing plans, chemical formulas, design drawings and patent applications.

Step 2 Once you fit your crown jewels into your security program, you must determine how to protect against the low-tech attack vectors. One way to do this is through an effective, incentivized and targeted security awareness program coupled with regular enterprise-wide security testing. Realistically, employees respond better to carrots than sticks.

If you properly train and incentivize security awareness, you will gain a strong defense.

Step 3 The third step is to simulate an actual attack, which often occurs as a “blended threat,” in your enterprise security testing. This testing should focus on all types of information, regardless of its form. You should implement testing along several attack vectors in a holistic approach, for example, combining a network pen test with physical and social engineering assessments. Those results will give you a better idea of your attack defenses.

Closing In some places of the world, people have the mindset that, if you fail to protect your information, it is up for grabs. They view you as an easy target that should have had better protection in place, not as a victim who suffered criminal damage

C om pliance vs. Security

through espionage. Today, there is no universally adopted legal definition for a “trade secret,” so countries treat theft of IP very differently.

To protect yourself, you must begin to view your organization from an attacker standpoint and realize that no company is 100 percent secure. A determined, skilled and highly motivated attacker(s) is almost impossible to stop, but you can put measures in place that make your company less likely to be a victim.

Other Recommendations: Tailor security awareness education to the appropriate audience. Train security guards to understand information security risks. Train employees on security considerations when traveling abroad and risks posed by hosting visitors onsite.

Remain vigilant on physical security and invest in technologies that will allow you to find synergies between logical and physical security.

Implement an information classification program that all users can understand. Keep it simple.

Consider data leakage prevention, data fingerprinting, identity-based encryption, and log monitoring.

Consider implementing technologies that perform information correlation checks. Merge and match information from all public touch points to deduce whether your trade secrets are at risk.

Engage legal counsel to identify which of your crown jewels are trade secrets that deserve perpetual protection as long as certain conditions are met.

Avoid predictability and limit need-toknow across the organization.

Reduce the rush to promote new company developments too quickly.

Have a clear, easy to follow incident response plan and simulate incident response as a result of potential misappropriation of trade secrets. ■ More: www.isaca.org/isrm

ww w.idm ionline.com

IDMi Document Scanner Guide (Up To A3) U x

Avlsion

BancTec Bowe Bell & Howell (NOW BY KODAK)

Canon

Epson

Fu|ltsu

Hewlett Packard

ibml

InoTec

AV36 Sheetfed AV50F Sheetfed AV176+ Sheetfed AV186+ Sheetfed AV210D2+ Sheetfed AV220D2+ Sheetfed AV320D2+ Sheetfed AVA6+ Flatbed AVA5 Flatbed FB1200 Flatbed FB5000 Flatbed IS15 Photo IS1000 Photo FB2280E Flatbed FB6280E Flatbed AV620C2+ Flatbed & Sheetfed AV8350 Flatbed & Sheetfed AV3200U+ Flatbed & Sheetfed AV3852U Flatbed & Sheetfed @V2800 Network @V6600 Network IntelliScan XDS IntelliScan 6000 & 9000 Spectrum XF 8090D Spectrum XF 8120D Spectrum XF 8140D Truper 3200 Truper 3600 Sidekick 1200 Sidekick 1400U 730DC FB CD-4070NW DR-121OC DR-201 OC DR-2050C DR-251 OC DR-2580C DR-301 OC DR-3080C II DR-401 OC DR-501 OC DR-7090C DR-7580 DR-9080C DR-X10C ScanFront 220 GT-1500 GT-2500 & Plus GT-15000 GT-20000 & N Pro GT-30000 fi-4340C 1I-4860C2 fi-5015C fl-5110C H-5120C A-5220C fl-5530C2 A-5650C A-5750C fl-5900C H-6000NS f 1-6130 fi-6140 fi-6230 fl-6240 ScanSnap S300 ScanSnap S510 Scanjet 5590

Scanjet 7650 Scanjet 8470 ImageTrac - Lite ImageTrac 5300 ImageTrac 5400 Scamax H04-510bd Scam ax H04-515bd (Scan+M icrofilm )

Scamax M06-402CD Scamax M06-412CD Scamax M06-422CD

-a

3

oo,,,

x

Si

Colour

D A4 D A4 D A4 D A4 S A4 D A4 D A3 S A6+ S A5 s A4 s A3 s 4”x s A4 s A4 s A3 D A4 D A3 D A4 D A4 D A4 D A4 D A3 D A3 D A3 D A3 D A3 D A3 D A3 D A4 D A4 D A3 D A4 S A4 D A4 D A4 D A4 D A4 D A4 D A4 D A4 D A3 D A3 D A3 D A3 D A3 D A4 S A4 D A4 S A3 D A3 D A3 D A4 D A3 D A4 D A4 D A4 D A4 D A3 D A3 D A3 D A3 D A4 D A4 D A4 D A4 D A4 D A4 D A3 S A4 S A4 D A4 D A3 D A3 D A4 D A3 D A3 D A3 D A3 D A3

BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C B&W B&W

B&W + C B&W + C B&W + C

2 uT)3 o o ro "O E x <5 (/) (b ^ m

USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 TWAIN TWAIN SCSI 3 SCSI 3 SCSI 3 USB 2.0, SCSI 3 USB 2.0, SCSI 3 USB 2.0, SCSI 3 USB 2.0 SCSI 2/3, Firewire SCSI 3, USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 SCSI 3, USB 2 SCSI 3, USB 2 SCSI 3, USB 2 SCSI 3, USB 2 SCSI 3, USB 2 SCSI 3, USB 2 SCSI 3, USB 2 USB 2, Network USB 2 USB 2, Network USB 2, SCSI USB 2, SCSI, NW 2 X SCSI, NW SCSI 2, USB 2 SCSI 2 USB 2 USB 2 SCSI 2, USB 2 SCSI 2, USB 2 SCSI 2, USB 2 SCSI 2, USB 2 SCSI 2, USB 2 SCSI 2, USB 2 Network USB 2 SCSI 2, USB 2 USB 2 SCSI 2, USB 2 USB 2 USB 2 USB 2 USB 2 USB 2, SCSI Network Network Network SCSI3 SCSI3 LAN LAN LAN

All Inform ation provided as a guide only. Please contact the suppliers

No No No 20 No 50 No 50 No 50 No 50 No 150 Yes No Yes No Yes No Yes No No No Yes No Yes No Yes No Yes 50 Yes 100 Yes 50 Yes 50 Yes 50 Yes 50 No 500 No 500 No 500 No 500 No 500 Opt 200 No 200 No 120 No 120 Yes 50 No 100 Yes 35 No 50 No 50 No 50 50 Opt No 50 No 100 No 100 No 100 Yes 100 No 500 No 500 No 500 No 50 Yes 40 Yes 50 Yes 100 Yes 100 Yes 100 Yes 100 No 500 Yes 50 No 50 No 50 Yes 50 No 100 No 200 Yes 200 No 500 No 50 No 50 No 50 Yes 50 Yes 50 No 10 No 50 Yes 50 Yes 50 Yes 50 No 1000 No 1000 No 1000 No 450 No 450 No 500 No 500 No 500

600 600 600 600 600 600 600 600 1200 1200 600 300 1200 600 600 600 600 600 600 600 600 600 300 400 400 400 600 600 600 600 600 300 400 600 1500 600 600 700 600 1500 1000 600 600 3000 4500 300 5000 600 6000 600 600 8000 10000 600 10000 600 60000 600 1000 600 600 1200 600 600 600 800 4000 20000 600 250 600 600 500 600 2000 2000 600 2500 600 8000 600 600 8000 100000 600 600 2000 600 5000 600 600 2000 600 5000 250 600 250 600 2400 2400 600 Unlimited 600 Unlimited 600 Unlimited 600 Unlimited 400 Unlimited 400 Unlimited 400 Unlimited 400 Unlimited 400

100 1000 2500 3000 3000 3000 8000 1000 1000 2500 2500 1000 2500 2500 2500 5000 2500 3500 1000 2500 Unlimited Unlimited 60000 60000 60000 10000 10000 4000 4000 1000

m anufacturers to verify data

5 15 20 30 60 60 60 10 8 6 5 8 8 14 14 20 50 30 50 18 30 550 260 75 120 140 67 67 23 43 38 42

8 30 40 60 120 120 20 100 60 100 14 60 550 260 150 240 280 112 112 42 76j 13 85

12

5 15 20 30 60 60 60 10 8 6 5 8 8 14 14 20 23 30 50 10 30 550 260 75 90 140 67 67 10 19 18 42 12

' 20 28 60 100 10 60 550 260 150 180 230 104 104 18 34 9 26

25 25 30 25 42 50 70 75 90

13 12 7 25 50 13 26 60 60 13 26 42 84 100 50 100 88 70 88 150 N/A 180 50 100

100

200

100

200

26 18 27 16 23 30 40 60 15 15 25 25 35 55 55

52

32

120

110

16 12 11 10 15 15 16 60 15 15 25 25 35 55 55

100

200

100

25 40 60 40 60

50 80

25 30 40 30 40 4 18 8.5 10 25 264 264 438 90 120 150

20 20

40 38 50 50 30 50 84

8 30 40 60 120 120 -

27 16 30 80 15 30 50 50 70 110

120

80 120

16 36 50 528 528 876 460 460 90 180 120 240 150 300 8

18 8.5 10 25 264 264 438 230 230

11 11 15 29 120

15 30 50 50 70 110 110 200

50 60 80 60 80 8

36 50 528 528 876 180 240 300

IDMi Document Scanner Guide (Up To A3) Continued O o

2

DS1225p Panasonic

Plustek

E&OE

KV-S1025C KV-S2028 KV-S2048C KV-S3105c KW-S4065CL & CW KW-S4085CL & CW KV-S7065C OptlcSIim M12 OptICard 610 OpticBook 300 Optic Book 3600 OpticBook 4600 MoblleOffice D28 SmartOtfice PS256 SmartOtfice PS281 SmartOffice PS286 SmartOtfice PL806 SmartOtfice PL812 SmartOffice PL1200 Sm artOtfice PL2546 SmartOffice PL3000 SmartOffice PL7000 Optic Pro A320 Optic Pro A360

A4 A4 A4 A4 A3 A3 A3 A3 A3 A3 A3 A4 A4 A4 A4 A4 A4 A4 A4 A3 A3 A4 A4 A3+ A3+ A3+ A3+ A3+ A3+ A3+ A3 A3 A4 A4 A4 A4 A4 A4 A4 A4 A3 A3 A4 A4 A3 A3 m m m m m m A4 A4 A3 A3 A4 A4 A4 A4 A3 A3 A4 A4 A8 A3 A4 A4 A4 A4 A4 A4 A4 A4 A4

s s D

s D S D D S S S S D S D S D D D D D D D D D D D D D D D D D S S S S S S S S S

s s s s s s s s s D D D D D D D D D D D S S S S S D D S D S S S D

A4

S S

A4 A4 A3 A3

s s

Colour

BW + C BW + C BW ♦ C BW + C BW + C BW + C BW + C BW + C BW + C BW BW + C BW BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW BW + C BW BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW + C BW BW + C BW + C BW + C BW + C BW + C BW + C

Connector USB 2 USB 2 USB 2, SCSI 2 USB 2, SCSI 2 Firewire Firewire Firewire Firewire Firewire Firewire Firewire SCSI 2 + USB 2 USB 2 USB 2 USB 2 USB 2 USB.2 USB.2 USB.2 Firewire Firewire USB 2, Network SCSI 2 SCSI-3 UW SCSI-3 UW SCSI-3 UW SCSI-3 UW SCSI III, LAN SCSI III, LAN SCSI III, LAN USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 n/a n/a USB 2 USB 2 USB 2 USB 2 USB 2 SCSI, USB 2 USB 2 USB 2 SCSI, USB 2 USB 1.1 USB 1.1 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2 USB 2

All inform ation provided as a guide only. Please contact the suppliers

No No Yes Yes No No Opt Opt Opt No No Opt Opt opt Opt Opt No No No No No No No No No No No No No No No No No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No No No No No No No No No No No Yes No No Yes Yes Yes No No No No Yes Yes Yes Yes Yes Yes Yes Yes

D Tl o It TJ 50 50 75 75 150 150 150 150 150 500 500 75 50 50 50 50 150 150 150 500 500 50 1,400 500 500 500 500 500 500 500 300 300 100 100 No No No No No No No No No No No No No No No No 1 1 n/a n/a n/a n/a 100 100 100 1000 300 300 200 1 Sht 1 Card N/A N/A N/A 1 Sht 50 50 50 50 50 80 50 80 80 -

Max DPI

OPEX

S

Flatbed

Microtek

Format

Kleindlenst microform GmbH

130 140 155 165 1150 1160 I250 1260 1280 1610 1620 11120 ScanMate 11210 11220 11310 11320 11410 11420 11440 11840 11860 Scan Station 100 H Series MFS655 MFS615 MFS455 MFS415 MFS402 MFS412 MFS422 MF S200-4065CW MF S200-4085CW MF S200-2028C MF S200-2048C ScanMaker 3880 Consumer ScanMaker 5800 Consumer ScanMaker S450 Consumer ScanMaker S480 Consumer ScanMaker I800 Graphic ArllxScan F1 Graphic ScanMaker 9800XL Graphic ScanMaker 1000XL Graphic XT-3300 Book XT-3500 Book FileScan 1600XL Book FlleScan 1620 Book Medl-1200 Dental Medl-2200 Dental Medl-3200 Mamm Medi-6000 X-ray Med1-60004- X-ray Medl-7000 X-ray AS3690I AS3690t DS1225m

Duplex

Model

Make

Kodak

B&W /

*< > s. a a & v O m •< "0 "0 TJ 13 t(V o 2 2 2 2 <t> 1000 600 25 20 600 25 50 20 40 1000 20 1200 600 32 1500 600 32 20 20 40 300 40 40 3000 3000 300 40 80 40 80 50 5000 300 50 300 50 100 50 100 5000 7500 300 62 124 62 124 300 80 N/A 80000 80000 300 80 ??? 80 ???

600 32 1000 25 600 30 30 ???

1500 1500 600 30 60 30 60 30 3000 600 60 3000 600 60 120 30 6(l 600 60 30 7500 7500 600 60 120 30 60 600 75 150 75 150 10000 Unlimited 300 160 320 160 320 Unlimited 300 200 400 200 400 600 25 50 20 40 1000 300 80 80 80 80 unlimited 400 160 320 160 320 unlimited 400 160 320 unlimited 400 120 240 120 240 unlimited 400 120 240 unlimited 600 90 180 90 180 un limned 600 120 240 120 240 unlimited 600 150 300 150 300 10000 600 60 120 60 120 10000 600 80 160 80 160 X 600 40 80 18 36 600 72 144 32 64 4380 X 600 6 s/6 X 600 X X 600 X 12 s/ X 600 X 03s/ X 01 s/

Unlimned Unlimited Unlimited Unlimited 4380 4380 10000 10000 8800 5000 1000 1500 1500 1500 -

-

m anufacturers to verify data.

-

X

OOd

X

OOd

X

OOd

X

OOd

600 600 4800 600 3200 600 600 600 600 600 OOd 600 200 90 90 56 56 200 90 90 56 56 300 110 110 56 56 300 110 110 56 56 600 41 72 18 32 600 22 40 9 16 600 41 72 18 32 600 41 72 18 32 600 65 130 65 130 600 85 170 85 170 600 60 100 60 100 600 3 3 600 10 HI - E 600 1200 20 20 20 1200 20 600 28 56 28 56 600 25 50 25 50 600 20 50 20 50 600 25 50 25 50 8 1200 8 600 8 N/A 1200 12 12 1200 25 46 25 46 1200 30 30 600 70 70 1600 5 5 24 600 24 -

IDMi Document Scanner Guide (Up To A3) Continued IDMi Tested (Issue) Colour Duplex Speed IPM Colour Simplex Speed IPM

IPM

BW Duplex Speed

IPM

BW Simplex Speed

B&W / Colour Connector Network Yes 50 D A4 BW + C Aflcio IS 200e Network Yes 50 Aficio IS 300e D A3 BW + C D A3 BW + C SCSI 2, SCSI 3 Yes 200 Aficio IS 330dc Yes 50 S A4 BW SCSI 2 Aficio IS 450se Yes 200 D A3 BW + C SCSI 3. USB.2 Aficio IS 760d No 1000 SCSI 3 s A3 BW + C SO Series SCSI 3.

No D A3 BW + C HQ-C D A3 BW SCSI 3.

No HQ-G No 1 Sht S A4 BW + C USB 2 100 Strobe XP220 USB 2 No 1 Sht 100 D A4 BW + C Strobe XP300 No 50 S A4 BW + C USB 2 XP450 PDF USB 2 No 50 S A4 BW + C 9750 PDF BW + C USB 2 No 1 Sht S A4 RoadWarrfor Yes 50 1000 D A4 BW + C USB 2 DocuMate 152 BW USB 2 No 50 3000 DocuMate 250 S A4 3000 USB 2 No 50 D A4 BW + C DocuMate 252 USB 2 No 50 3000 D A4 BW + C DocuMate 262 No 3000 BW + C USB 2 50 DocuMate 2621 D A4 Yes 50 2500 BW + C USB 2 DocuMate 510 S A4 Yes 50 2500 S A4 BW + C USB 2 DocuMate 520 USB 2 Yes 100 6500 BW + C DocuMate 632 D A4 BW USB 2 Yes 120 8500 S A3 DocuMate 752 All information provided as a guide only. Please contact the suppliers manufacturers to verify data.

Model

Max DPI

E&OE

Duty Cycle

Xerox

ADF Cap.

Visioneer

Flatbed

Scan-Optics Staude

Format

Ricoh

Duplex

Make

600 33 33 17 17 600 38 38 11 11 600 30 30 10 10 400 57 57 600 70 70 38 38 400 240 240 300 70 340 90 180 400 100 200 N/A 600 10 10 600 10 10 4 4 600 20 20 600 20 20 600 6 6 600 15 30 15 30 600 22 600 25 50 25 50 600 33 66 33 66 600 38 76 37 71 600 10 10 600 20 20 600 40 80 40 80 600 60 120 -

Before the next PRINT issue .... we will be re-vam ping the guides.

The following changes will be taking place, some immediately, and some over several issues: - larger font for ease of reading - more content - re-vamped microfilm equipment section and, if there is enough interest from vendors a

BRAND NEW SOFTWARE GUIDE LARGE FORMAT SCANNER GUIDE All change requests, additions/deletions to listings or software packages for consideration should be sent to: idm iqu ides@ idm ion line.com D eadline fo r the next print issue is: 16th Janu ary 2012

If you are an equipment or software vendor, reseller, importer, or OEM, then don't miss out.

Get listed in the new IDMi Guide now!

r~

a

IU M i T ested

55

*8

SB

85

si B85

SI

88

88 as

85

i§ St

88

tt 88

HIM5!

818

in

: :

*s

I 888 88

88

t 88

Tl3tl3tl3T)3t!

|E§f|E| “ 8

sS

88

as

Z| 4

t

Oa

Jsfffeh

Sf Si

Ik-h HU

!'§

3 3 Si

!

!n

snssn

88

%

ill in

88

II

n

i ill

II

If IDMi Microfilm Scanner Guide

588

lilili

I?!

M a i R e s o lu tio n (TRUF. IN T b R p o la te d or n o t d e c lared )

8 8 88 85

5g

{<

« £ _

nng

* g

i!

111!

I I I

1

II 1 !

If

US

18 11

III

11

1*I l f

ii

11 o o H I

II II II

II

!j* -U

m

fifi

'£

?!

Is

I

??

ii

Si

! Il

i

li

aa

ii

i I in

f!

i t

ii

11!SI

11

*5 > 0

lllll

ii

il

if il

sts

a

!i illii

I l lSiJOil ill .

5s

II

fI s m

I

!!!

I!

II?

Sc c I

8

Ll i

I?

g

i

i *

llJl

Is *1

11

ec

u.

III

<

i i«!« L sl k

11

1

a o

I!

il!

ii

jj j IS

£8

I

IDMi Mono Microfilm Writer Guide NOTE: • • • in d ica te s that the device is also capable of w ritin g to c o lo u r film (See C o lo u r M icro film W riter G uide below)

Kodak Other Features: Options Include: Microbox Other Features:

3

o

M 2 2

3

IDMi Tes

Other Features: Options Include:

g

3

w 2 2 :e

2 c j X 33

Fujifilm (New Entry) Other Features: Options Include: GID Quantor

O

$

2 2

2 <o 3

$ a 3

* to' ■o Z* 3 (A Connector Type Film Reduction Available From 2.

3 o AR-1000 24X, 32X, 36X, 40X, 42X, 48X | 400+ min | 300dpi | 111001 520 | 755 | Refer to Fujifilm | 16mm roll Accepts 2 film cassettes for simultaneous production of two sets of output with no reduction in speed. Index frame generation.

Auto rotate and auto batch header template inclusion 10301 1680 | 840 469 G I D Quantor |____1 24X, 42X, 48X, 72X 240dpi | On-line or Off-line Model 6880 I Fiche I Accepts alphanumeric and image data and outputs to fully processed cut fiche. Electronic soft forms outline. 4 international soft fonts in 9 sizes. CRT imaging. Direct positive (green) film.

300 dpi resolution. Stacker. Duplicator. Collator. Packager.

Kodak 24X, 40X 8 5 -1 7 0 ipm | 1196 615 | 810 159 19600 Series I 16mm roll 1 I Accepts 2 film cassettes for simultaneous production of two sets of output with no reduction in speed. Text file index can be merged into an ent arprise database.

Model 9610 with output speeds of 85 ipm at 24X and 200 ipm at 40X. Model 9620 with output speeds of 170 ipm at 24X and 400 ipm at 40X. 1 card/min 1255 1680 700 350 Refer to Microbox I____ 1 To fit frame.

CADMIC Aperture Cards I 500 card hopper. Automatic density control, OCR and Hollerith indexing. Uses silver halide film as CADMIC or dry silver film as CADMIC DRY COM. 3 chamber processing for wet film, thermal processor for dry film.

Options Include: Alternative file formats. Facility to operate on-line.

Polycom 400dpi 260 3=0 630 36 Refer to Microbox 35mm roll 1,16 or 64 images per frame.

Microbox MicroPrinter □ Film is recorded by a laser. Indexing in OCR characters at start and end of film, also machine-readable bar code under frames with frame number, length of section, reduction and Other Features: positioning of images.

Options Include: TIFF 8-bit greyscale or PostScript level 3 file format input.

Micrographics Data

16 & 35mm roll

MD

Variable

1.4 sec/frame

9 pin serial

1280

925

655

1,0

www.mcLsR

900

80

Refer to SMA

56

Other Features. Metadata program choices, plus electronic indexing of all data recorded on each roll of film.

Options Include: SMA

S'

Variable

16 roll

Model 16

60 ipm

LAN interface

1050 1200

n 1 1 |

PC workstation included , uses normal camera film, 1,2 or 3 level blips, frame numbering, facility to record file name below each frame, polarity of images can be reversed, bitonal and grey scale conversion, Duplex Mode available Options Include: Can be upgraded to 35mm Other Features:

Model 51

SMA

16 & 35mm roll

Variable

60 ipm

LAN interface

1050 1200

900

80

Refer to SMA

M

Other Features: PC workstation included , uses normal camera film, 1,2 or 3 level blips, frame numbering, facility to record file name below each frame, polarity of images can be reversed

SMA

Options Include: 300 m daylight cassette 60 ipm 105 x 148 Fiche 24X (98 frame) Model 105 Other Features: | PC workstation included, on-board film processor included, does not require plumbing Options Include: |Alternative reduction ratios and grid formats available.

Wicks & Wilson Other Features:

IAC 0-2

|

Aperture Cards

30.66 X 41.28 max image area

35 cards/hr

LAN interface

1200 2000

180

Refer to SMA

PC Win 98. NT or 2000. | 650 | 1280 | 530 | 105

Refer to W&W

900

i___ i I |

400dpi

□

|12 row 80 column Hollerith punching, 60 or 80 position printing for indexing. 250 card capacity hopper. Imaging using laser technology. Accepts digital image data from CAD system |or EDMS and plots to fully processed aperture cards.

Options Include: I

i

Variable to record AO or up to 64 Up to 1200 fph Network compatible 11500 I 1280 | 780 I 190 Refer to Zeutschel 900dpi images per frame U Standard microfilm b&w or colour, film density 1.0, resolution more than 120lp/mm for all standard file formats, automatic fade in of meta data, up to 3-level-blip, automatic page Other Features: numbering system, variable mask and film step, automatic fade in of file name, Daylight cassette up to 300m for film loading and receiving, automatic film cutting at the end of the job, wide range of automatic image processing tools for perfect image and batch Options Include: conversion All information provided as a guide only. Contact the suppliers manufacturers to verify data.

Zeutschel

OP 500

16 & 35mm roll

IDMi Colour Microfilm Writer Guide H 2 $ O O ?

3 3 =: 3 ta C 3 CL

_ S

BT, CT

40s

o Fraunhofer IPM

|

Colour Microfilm Recorder

RGB Laser

35mm

None

All standard file formats

Yes

o

40s 1060

300

Other Features: Resolution of 15.000 x 10.666 pixel per frame (45 x 32 mm2) Comments Featured to scale with several adapted interpolations and optimal vectorgraphic-handling, to combine images by several nesting modes and to provide appropriate container types for I li i a^r ;------------------- a “ 1 ----------i All Micrographics Data BT, standard 56 1.4s 10s 1280 110 User Yes Monitor 16/35mm roll file CT Writer AW 1 formats Other Features: [Metadata program choices, plus electronic indexing of all data recorded on each roll of film. Polarity of Ibackground and image is reversible.

Comments ProArchive

Eternity 105 TIFF 105mm None ?

Laser RGB Laser Recorder Other Features: ?

Comments * Throughput speed is based on a 200 image 105mm fiche. There is no direct equivalent to 16mm or 35mm writing.

SMA SMA 51

Monitor

16 & 35mm roll

?

All standard File formats

Yes

7

7

BT, CT

3s

360s

7

1915

440

1050

80

57

Other Features: |PC workstation included, on-board film processor included, does not require plumbing Comments Alternative reduction ratios and grid formats available.

All standard 190 Yes 3s 1500 7 7 file formats Other Features: |Standard microfilm b&w or colour, film density 1.0. resolution more than 120lp/mm for all standard file formats, automatic fade in of meta data, up to 3-level-blip, automatic page Comments [Daylight cassette up to 300m for film loading and receiving, automatic film cutting at the end of the job, wide range of automatic image processing tools for perfect image and batch

Zeutschel

OP 500

Monitor

16 & 35mm roll

7

All information provided as a guide only. Contact the suppliers manufacturers to verify data.

Manually Auditing Firewalls - the big hidden cost!

by Michael Hamelin, Chief Security Architect at Tufin Technologies The manual administration of firewalls is hurting the purse strings! That’s according to the preliminary results (Take the survey, help us learn more http://svy.mk/pTZuEp ) of our annual survey that Tufin conduct every year called the “firewall operations and compliance survey”, which shows that IT is getting seriously stung in terms of cost and time when it comes to manually auditing and managing rule changes on firewalls - all completely unnecessarily.

The survey found that every second firewall admin is locating firewall rules that overlap or are redundant by manually inspecting the policy. Not only that this is very much time consuming , the human mind just can't calculate all the permutations that a machine can calculate in milliseconds.

This approach to policy remediation may have worked when DEC developed the first packet filters in 1988 and AT&T went on to develop stateful filtering technologies some two years later, but not anymore.

Those developments were, of course, more than 20 years ago, and firewall scripting - let alone policy technology was in very much in its infancy. Even back in the early 1990s, however, some degree of automation was possible. And now here we are in 2011 and 50 per cent of admins are inspecting their firewall policies using a manual approach - this is an extraordinary waste of programming talents.

cent of organisations are taking a completely automated approach to their firewall audits, with 70 per cent either undertaking the process manually or - perhaps worse not doing anything at all in this regard.

And yet it doesn't have to be this way, as even a semiautomated approach to firewall policy analysis and auditing can pay dividends, as it allows IT security professionals to deal with more important tasks - and so minimise the time needed to conduct routine audits and allied firewall security processes.

In a previous survey of IT professionals in the summer of last year, Tufin found that almost 10 per cent admitted to cheating to pass a firewall audit. This was largely down to a result of a lack of time or resources than any misguided intentions.

The irony of this survey is that the 2010 survey was actually an improvement on the previous year's results, which found twice as many respondents had cheated.

Of the 10 per cent in the 2010 survey who admitted to cheating on an audit, half of them cited time restraints and 22 per cent cited resource constraints. 11 percent said that they didn't see the point of doing the audit and same volumes against had other reasons which they did not elaborate on.

Even though any networking novice will tell you that automated firewall policy analysis is now possible, the use of a manual approach is not only cumbersome and timeconsuming, it also begs the question as to how accurate a manual analysis can be. People get tired and make mistakes - computers and programs do not.

“The preliminary results from this year's survey are arguably more interesting, as no-one can say that they have to complete a firewall policy analysis and audit manually because of lack of resources. There are plenty of solutions that can help automated the process, so there really is no excuse for this curious Luddite approach to enhancing the effectiveness of a network firewall. ■

The findings of this research suggests that just seven per

More: www.tufin.com

IDM i:071.20

Manually Auditing Firewalls

ww w .idm ionline.com

InoTec UPGRADE TO HIGHER PRODUCTIVITY A N D LOWER COST OF OWNERSHIP W IT H INOTEC! The InoTec 4 0 2 ,4 12 and 422 high volume production scanners are capable of scanning at 90, 120 and 150 pages per minute respectively. W ith a wide range of features and capabilities the InoTec 4x2 Series will ensure maximum productivity, due to its robust German engineering, plus the innovative paper transport system means less consumables making the overall cost of ownership very competitive.

Total cost of ownership over 5 years £-

£5,OCX)

£10,000

£15,000

■ Scanner List Price *

£20,000

£25,000

■ Consumables Costs * *

£30,000

£35,000

£40,000

£45,000

£50,000

■ InoTec Conumables * * *

*

According to list prices as o f 0 6 /1 0 /2 0 1 1 o f a m ajor European distributor in the scanner field o r original RRP o f m anufacturer w ith o u t VAT

**

5 Year consumable costs fo r Kodak & Fujitsu supplied by Kodak on 2 7 / 10 /2 0 11. Prices o f single packs used. RRP w ith o u t VAT

* * * Based on Input Rollers changed every Im scans (78 sets) and Seperation Rollers changed every 1.5m scans (52sets) w ith o u t VAT N B - InoTec 4 x2 range has various models and th e 4 2 2 is th e m ost comparable in this scenario.

Oh... and if you have a Service Contract with us w e’ll throw in all your consumables for FREE. W e have our own engineers across the UK offering the best support for your equipment.

TRADE IN? Contact our Sales team if you have equipment to trade in for further discounts

For more information o r to organise an on-site demonstration contact us on 024 7625 4955 o r email info@genusit.com www.genusit.com Terms & Conditions apply.

Interdetermination in a Microsoft®

SharePoint Environment

by Steve O' Donnel, SharePoint Implementation Consultant

Executive Summary

The dictionary definition of the word Interdetermination is: ; cause and effect operating among several factors : multiple causation SharePoint 2007, and to a lesser extent SharePoint 2010, as is the case with all IT systems, is subject to limitations. This two-part article sets out to identify and highlight the gaps in the floorboards of consequence, and to warn of potential shortfalls in performance, (and functionality), which may affect the users directly, or might affect the process of a SharePoint 2007 application build and roll-out.

Today, you can ask 10 people to define SharePoint, and where 5 would give you 5 different answers, but the other 5 might well ask you - ‘What’s SharePoint?’.

For this reason, we will begin at the beginning. A very good place to start, because of the ever-changing land-mass that is software. With roots stretching back into the 1990's, Microsoft ‘evolved’ SharePoint as a corporate tool during the late noughties. By 2007 there was (funnily enough) SharePoint 2007. The first real collaborative tool which was easy to learn but difficult to master.

The Challenge

The aim of these articles is to provide a better understanding These articles are positioned to sit between what you might of SharePoint requirements in order to not only develop a call a baseline SharePoint specification successful SharePoint environment for users, and a more detailed design specification. but also to reinforce the pre-requisite As such, they fill the gap between the requirement for data and documents to be in Interdetermination top-level ‘tick-list’ of functional good order to allow a smooth migration into requirements that you might present to a SharePoint. manager, and the more in-depth '.. cause and effect definition of fields and other elements in The Solution operating among the design document, which you might The solution is to provide a seamless flow of discuss with the end-user group. (The several factors" information at all different levels. In order to latter document perceived by achieve this, there is a requirement for the management to be as (generally) of no diverse content and high numbers of more than passing interest to most documents with varying levels of technical mortals. A.k.a. Boring!) content, to be controlled at managed at all stages. This can By exposing the reader to some of the shortfalls in the SharePoint 2007 out-of-the-box functionality, the hope is to save hours (if not days or even weeks,) of hair-tearing and growling.

Why Cover SharePoint 2007?

Mainly because many organisations are still using the 2007 version, the migration path towards 2010 is not one to be taken lightly, and because it is the only version in use at the authors place of business!

What is SharePoint?

In the old days of the 90’s (1990’s that is - I am not that old,) I could ask 10 people to “Define workflow.”, and I would get 10 different answers.

IDMi:071.22

be achieved through the creation of the following suite documents, the requirements for which may be auditable, and the range of which you can determine for your own organisational requirements.

SharePoint Specification This wide-audience document outlines (in laymans) terms, the basic functionality of SharePoint and. what it might bring to the business or individual business units.

The Baseline Specification for SharePoint This document sits at management level, and is simply the tick-list of requirements in general terms, which in turn, defines the type of application build(s) required.

Interdetermination in SharePoint

www.idmionline.com

By the way, being ‘old-school’ I always refer to the SharePoint sites and their underlying lists and other components, as ‘applications’. To me, the ‘application’ is the entire suite of site, lists, document and other SharePoint libraries, which goes together to make it all work cohesively.

Interdetermination of Change (Which can be derived from an edited version of the content of this article.) This is positioned in the middle-ground between managements own understanding of their business or business unit requirements, and the applications more technical requirements. It should be the case though, that this document can be read and understood by all.

Detailed Design Specification This is the more ‘geekie’ document which is set at a lower and much more technical level. IT has two purposes, i) To allow the IT service-desk to support the application. (At least to provide first-level support of the type, ‘It’s broken/not working, how can you help me?’) ii) To allow guidance for the end-user group, and to allow the developer to build and to record changes which reflect the ‘as-built’ status of the application within the SharePoint environment.

Audience

All documents will have varying audiences as stated, but the one you might extract from the points made in this article, is the document that is suitable for the widest audience. This is because the readership is likely to vary in terms of their working/user knowledge of SharePoint, because the language used within it is (or at least, should be), relatively jargon-free where possible, and explained where required.

access to the database, but by making it as hard as possible to make any sense of it when you get there, and making it hard to unravel the structure beneath SharePoint.

For this very reason, SharePoint does present some oddities in terms of its presentation to both users and developers alike. In turn, this situation can lead to both user frustration, and that of the help desk team who have to attempt to at least understand, if not resolve any user problems or issues with SharePoint applications.

Site Development

All/most readers will be familiar with that famous acronym, WYSIWYG. (What You See Is What You Get.) Originally coined in relation to word processing software, where the layout on the screen was (close to) what you would get in print, the term now also relates to many computer packages such as Adobe Photoshop, in object-oriented programming software such as .NET, and web editing software like Design Studio.

Generally, and the writer does emphasis the word ‘generally’ here, WYSIWYG does NOT apply to SharePoint when designing a site, or any list or library within the standard SP environment for that matter. (However WYSIWIG does apply when using the SharePoint Designer tool, which has its roots in Microsoft Front Page, the WYSIWIG web design software which is now replaced by Design Studio. All users and most SharePoint application builders, will not have access to this software though. Which is probably a good thing. This situation does however force developers using the basic SharePoint tools, to develop standard SharePoint sites ‘blind’.

Taming SharePoint

One of the many quirks of SharePoint, is The front-end of the SharePoint that objects such as site names and menu environment (the screens visible to names within SharePoint, retain the name the end-user,) are based on templates .... you will not find a which they were allocated when originally designed to present information in a ‘normally named’ created.

(However many times they are consistent and generally (?) userdatabase table renamed.) If looking ‘under the hood’ of the friendly manner. Access to the many SharePoint database, you will not find a functions which are available within anywhere." ‘normally named’ database table anywhere.

SharePoint, are driven by the users Now you can begin to build a picture of why network login. That login is managed the management of change within the by the Microsoft Active Directory SharePoint environment is not only important - it’s crucial. service. It is possible to manage SharePoint content beyond That means crucial not only to the original definition and that of ‘general access’, to only allow access to specific development of the site and all its component parts, but also areas of the system. This type of micro-managed access crucial to the sites on-going usage and its support by IT. allows individuals access (or not!) to documents and data right down to a single document or to single record level.

By the way ....

Because of this complexity in the definition of content a user can access within the system, SharePoint may lead the user to conclude that functionality which they think they should have, is apparently ‘not working'. However this may simply be down to the manner in which a SharePoint site and its underlying applications have been built, but it could also be due to the security setup.

With SharePoint, Microsoft set out from the very beginning to not only ‘protect’ the end-user from the complexities of a content management system, but to also to ‘protect’ the system itself from even the most experienced technical users. This is achieved not by obscuring or obstructing direct

ID M i:071.23

What we will say about this article which is worth mentioning at this stage, is that this is not about installing or implementing SharePoint 2007, as it assumes have already had your IT people go through that process. Neither does the article purport to be a guide to Advanced SharePoint Development. Time and space is too tight for both of the preceding to be covered here, and much information is already freely available on the interweb. Moving on.

So, what’s in a Name

In the construction of a SharePoint application, the site, lists, libraries, and any menu structure created, all begin with the allocation of a SharePoint name. The name is prompted ►

Interdeterm ination in S harePoint

w w w .idm ionline.com

◄ forby SharePoint at the time of creation, and after parsing

by SharePoint to ensure no restricted characters are used, SP forces the user to use plain English, (e.g. Incident Tracker,) But, as we will find out, SharePoint stores the original name regardless of changes, allowing renaming to take place, but retaining the original name as a pointer to what can become an underlying labyrinth of unfathomable locations.

‘space’ character might cause problems with directory, file, or other names. (How many times have we seen a space replaced by %20 in a web site URL?)

Example: Assume we are building a site called Legal. Let’s also assume that the site sits on our company server called Zanzibar, and let’s further assume that the site location is in sharepoint and within a directory called content.

SharePoint can be the very Devil when it comes to renaming If we rename our fictitious site to Legal & Commercial, the following occurs:

The physical location to the techies, will look like this on the network: ►

www.mysite.com/john%20william%20baker/index.htm It’s much easier to read as www.mysite.com/JohnWilliamBaker/index.htm - is it not?)

The physical location to the techies will STILL look like this on the network: \\zanzibar\sharepoint\content\Legal.... As you can See nothing has changed!

\\zanzibar\sharepoint\content\Legal It will look (something) like this when you try to access the details within the SharePoint server (if you have access to it): {OOBFEA 71-DE22-43B2-A 848C05709900100}

'SharePoint can be the very Devil."

It will look something like this when you access the database using an SQL tool: <SQL>content\Qskn39278grfmlkjleklfhoiuoia And in the internet browser it still looks like this:

By comparison, a ‘normal’ SQL database will present the above as:

httpJ/sharepoint/content/Legai.... Again, it looks to the user and the browser, as if nothing has changed

<SQL>content\Legal

It is only in the SharePoint menu and navigation system, that the site has actually changed its name to:

As you can see, SP, (or rather Microsoft), has made it hard for us by internally managing the database with an undecipherable name.

Legal & Commercial

To most of us, the mere mortal end-users, the SharePoint URL is simplified, and will look something like this in the internet browser:

Confusing? Not to the users. Not usually anyway. It would only be confusing if a user is having access problems and they are trying to figure out if the URL is correct, while being aware that the name has changed, but also unaware that the URL does not change.

http://sharepoint/content/Legal (And thankfully so.)

Within the SharePoint menu/navigation system, the site is simply called: Legal Let’s be difficult now. Let’s change the name from Legal to Legal & Commercial.

But first - a bit of background ....

The author comes to the SharePoint environment from an object-oriented programming and project management background which includes a period (of decades!) working with both Windows and UNIX/Linux. As such, and it is ingrained into the modus operandi, the chosen default naming convention is to use Uppercase for each main word with NoSpaces.

This not only makes the text easier to read than UPPERCASE, but also eliminates any difficulty where the

IDMi:071.24

To the support gurus though - it is not only confusing, but frustrating too. The system is no longer WYSIWIG. It has been directly compromised by a change. Importantly, like many changes in the SharePoint environment, it is a change which does not ripple through the SharePoint internal structure, at a time when you would expect it to. (After all, if you rename a Word document, you can only access it by its new name after the event.)

Why does SharePoint operate in this manner? Only Microsoft can tell us. It does mean however, that if you rename an object in SharePoint, that object retains its original name and only renames the ‘pointer’ to that location.

This is the key reason why there has to be a suitably comprehensive Detailed Design Document. ■ Steve O'Donnel In part 2 o f the article, in ID Mi 72 (February 2012), Steve will continue by taking us further along the route o f controls and consequenses in a SharePoint 2007 environment

Interdetermination in SharePoint

www.idmionline.com

B2B MARKETPLACE B2B M arketplace brings together inform ation m anagem ent professionals.

Print and digital advertisers qualify for a free display entry. Non-Advertisers from only £34 per issue*. * Based on 6x print + 6x digital-only insertions

#1 ccube solutions

OITUK Ltd., specialises in providing C-Cube Electronic Document and Content Management & Workflow solutions, based on the C-Cube software suite. Systems scale from small departmental applications to large enterprise-wide solutions and include: the C-Cube Portal, Electronic Forms, Content Searching, and C-Cube Electronic Document & Records Management System (EDRMS), offering specialised solutions across the Public and Private sectors. More at www.oituk.com or phone: 0044 1908 677752

DocuLex

DocuLex offers years of experience in the field of document and content management software development. DocuLex's award winning Archive Studio product suite encompasses document capture, indexing, data conversion, security, 100% browser access, email archiving, workflow, word processing document control and records retention management. More at: www.doculex.com

G E N U S

raaviOMCaccim to roua inio*matk>m

=_lbml InoTec O r g a n i s a t i o n s s y s t e m e

& M )

M icro grap hics D ata

n e K tS c a n

scan

tydcfouivvv

(U.K) Genus is a solutions provider for the entire life-cycle of documents, books and microfilm, dealing with their creation, access, scanning, archiving, and retrieval. UK based specialists in imaging, document, archive and print management throughout the world. We advise on and provide solutions for document and image archiving/access. More at www.aenusit.com or phone: 0044 24 7625 4955 ibml provide solutions to companies around the world to automate their most demanding document scanning and in-line data capture applications and drive their transactional document management.

More at www.ibml.com or phone: 0044 1483 549818

Modern office organisation and workflow management requires high-tech equipment for implementation. Enormous amounts of paper in various formats, with various content, crumpled, dirty or torn - these are the day-to-day challenges. Only leading edge technology is capable of meeting these challenges.

More at www.inotec.eu or phone: 0049 6036 9708 0 Micrographics Data (est. 1989) Asia’s leading micrographics and preservation solutions provider. We provide a wide range of micrographics & preservation equipment/services. Our flagship product, AW1 Series, is probably the fastest 16mm/35mm colour archive writer in the world with the highest optical resolution of up to 150 Ip/mm in the market. We are also the global exclusive Singapore Press Holdings newspapers micropublisher. More at www.md.sa or phone: 0065 64727255 nextScan is a developer of leading edge technology for the micrographics conversion and document management industry. nextScan’s innovative products are designed and built with a simplicity and functionality that aim to increase user production and lower overall cost for scanning film and fiche.

More at www.nextscan.com or phone: 001 208 514-4000

Microfilm Roll, Microfiche, Jackets, COM, Aperture Card converted to digital images. With Over 15 years of experience with microfilm and digital images. We manage and monitor each specific project meticulously. Every single image (and not just a thumbnail) is audited and then verified. No microfilm scanning project or job is too small for us. We provide value added enhancements: De-Speckle, Skew correction, Cropping, Density adjustment, Image Rotation, OCR, Edge Enhancement, PDF conversion, indexing, etc. Call us On +44 800 689 9369 or visit us at www.scanmicrofilm.com or email us on csp@scanmicrofilm.com For over 30 years Wicks and Wilson has been the world leader in the design and manufacture of micrographics equipment, focussing on electronic imaging technology for scanning all formats of microfilm (aperture cards, roll film and microfiche).

More at www.wwl.co.uk or phone: 0044 1256 842211

ZEUTSCHEL www.idmionline.com

As the leading specialist supplier of digital and analog storage systems, we develop and manufacture: scanners (book scanners, overhead scanners, large-format scanners, color scanners, gray-scale scanners, microfilm scanners), book copiers, book cradles, scanning tables, microfilm plotters, microfilm exposure systems, microfilm cameras, capturing and editing software. More at www.zeutschel.com or phone: 0049 7071 97060 B2B Marketplace

IDMi:071.25

By Jeff Hudson CEO of Venafi When news of a persistent and deeply penetrating attack against government agencies makes headlines, speculations prompt widespread panic. Case in point: the public response to recently revealed activities of the Operation Shady Remote Access Trojan (RAT).

Are audiences missing the key issue here? Primed by the summer’s latest political thriller, they consider governments and their ilk as the main target. Pondering the implications of compromised, top-secret diplomatic correspondence and military secrets they concede: well, better them than me. But the Shady RAT hackers seemed equally interested in stealing intellectual property and customer data from the businesses as well, which means the problem extends into the private sector too.

Firewalls, antivirus software and intrusion detection tools may work to keep out stealthy attackers, but what is to be done about rogue insiders?

The reality is that the bad buys are already in—working from the inside of your organization. Dmitri Alperovitch—McAfee Vice President, Threat Research and author of the report on Operation Shady RAT—divides all Global 2000 companies into two camps: Those who have been compromised and know it, and those who simply don’t know it yet.

IDMi:071.26

Knowing that it is no longer a question of if your company will become a target but when, let’s take a moment to evaluate the current security landscape. Sure, you’ve got everything in place to keep bad guys out. But what’s to be done about those bad guys working from within?

Not worried? According to Gartner, you should be. A recent Gartner survey found that insiders typically cause far more damage because they know where to find sensitive corporate personal, financial account and other information.

All Data is Valuable

Some might wonder why hackers would set their sights on stealing their companies’ relatively humble data.

It’s not rocket science, right? Of course, everyone understands the intrinsic value of some information, such as the highly regulated customer account data most organizations already protect with strong authentication and encryption.

But those responsible for Operation Shady RAT, whoever they were, drew far different, and far more information into their net than strings of credit card numbers. And they’re not the only ones.

Organized crime hijacked hacking from those comparatively benign groups of exploit-vying coders long ago. Now less-overtly criminal

Game Over..Or Not?

organizations and self-interested, nation states are also realizing the value of data theft. Targeting information opportunistically, they search for anything that is cheaper to steal than it is to buy or develop on their own. In other words, what one company pays its employees to do—develop a new drug, program a new application, design a car battery—another company pays a hacker far less to steal. And those hackers may already be inside your company—working for you. Though their motivations may differ, financial or sometimes moral, the outcome is the same. Valuable data is compromised.

All Data is at Risk

As was the case with Operation Shady RAT, hackers collect data from the inside, infiltrating systems by sending a phishing email with a link that installs malware on an internal machine. At that point, the protection of firewalls and perimeter-based evaporates. Thus IT security professionals must operate under the assumption that there is every possibility and a good probability that an unauthorized user will access critical company data and— if the data is in plaintext—exploit it.

Step 1 to Protecting Your Organization: Encrypt Everything

The natural first step, then, is to encrypt the data—yes, all of it. As www.idmionline.com

most companies already encrypt the data they deem most critical, they simply need to expand the protective umbrella, pushing encryption assets to all data wherever it moves or resides. For instance, • Symmetric keys should be leveraged to encrypt stored data on all systems, including server and enduser platforms and remote storage devices.

• Digital certificates, asymmetric and SSH encryption keys should be used to encrypt all data flowing between users and applications as well as that data moving between applications. In the last few years, the latter type of communication has become increasingly important as cloud computing has turned up the volume on server-to-server transmissions, authentication and processing.

• Given its clear benefits, cloud services have attracted significant attention—from both security professionals and criminal organizations as more valuable data moves in this direction. IT security professionals must not neglect resources that reside in a public cloud, which require the security of encryption as much or even more than internal systems do.

Step 2 to Protecting Your Organization: Manage Those Encryption Assets Too many make the mistake of relying solely on encryption alone to protect them, but fail to protect the keys.

Encryption stymies cracking efforts.

But people crack encryption algorithms at security conferences to earn the accolades of their peers on a regular basis. What was once sacrosanct is yesterday's hacker’s lunch (think, RSASecurelD tokens).

Much more rarely do they attempt to do so in the real world where exposure is the objective. When data is protected by securing it with an encryption key, the key becomes the data. Thus it is now the key that must be protected. If the key is not well managed, the risk of data loss or theft increases significantly.

Take an analogy from the physical world. Increasing the size of the lock on your door or business may make you feel more secure. But the reality is that if the key—no matter its size or strength— is left on the transom, under the mat, or distributed willy-nilly IDMi:071.27

out in the open, it doesn’t matter how large or strong the lock is. The data can be easily accessed. In fact, Shady RAT’s malware had no sooner installed itself than it went in search of encryption keys, which it found, no doubt, in the myriad locations where people routinely leave them exposed.

As is almost always the case, the individuals or admins who install the encryption to protect the data typically have unfettered access to the keys.

This means that the keys and certificates can be copied, used maliciously, or given to a third party to do so. The keys that protect the data are often accessible to multiple administrators with no audit or access controls, no separation of duties, and are often distributed widely and insecurely within organizations. the ramifications. If companies followed best security practices, a single system that is exposed to malware like Shady RAT’s would only deliver hackers a limited set of data.

Interesting. Now let’s see how that might look. Ideally, a user SSH key—password-protected, of course— provides access to the user’s account on a single remote system. The user’s password to a private keystore opens that keystore alone. In addition, admins rotate keys often, limiting the window of exposure. Once malware is removed, hackers cannot continue to use the same compromised key to access data for months and years.

However, most organizations do not implement best practices—as Venafi, industry-leader in Enterprise Key and Certificate Management (EKCM), and Echelon One, IT security research firm, discovered in a recent assessment of more than 420 companies. Instead, an FTP password takes the hacker to a site where admins have posted several server private keys. A keystore password opens every keystore on every system, unearthing a treasure trove of encryption keys. An SSH key tunnels a hacker into the root of several remote systems, including ones with access to still more systems—and the SSH key never changes. The hacker can use it five years later with the same success and the same ability to collect more keys.

access to the company’s data.

To limit access and ensure the security of sensitive data and critical company information, organizations must take the initiative to implement the following best practices.

• Minimize encryption keys’ exposure to admins at all points in their lifetime from enrollment (in the case of a certificate’s private key) to deployment, and even on to ongoing management.

• Implement strict controls that provide audit trails for access to encryption keys.

• Use different passwords to secure different keystores, and rotate those passwords.

All Data Can be Protected Digital information has transformed into one of the most crucial business assets an organization owns. As a result, protecting critical information and its availability is now a strategic business imperative. Encryption is the most pervasive technology employed today for protecting data. In fact, while encryption was once used almost exclusively to protect information using SSL certificates and symmetric and asymmetric keys to scramble data, now it is also used in authentication mechanisms to confirm the identity of a user or a device, and for digital signing to ensure the integrity, authenticity and non­ repudiation of data.

The ever-growing use of encryption is creating new challenges to manage increased complexity. Companies can’t force morals on greedy competitors who see hacking as an alternative to development. Nor can they afford to give those invention and intellectual property parasites free access to their work. They can only make their data less interesting to the unscrupulous by locking the data with encryption and securing the encryption with proper key and certificate management. Attacks like Operation Shady RAT present the most convincing argument for why you need to encrypt data and manage keys— invest in taking precautions or give the world access to your million-dollar-baby for free. ■ More: www.venafi.com

In other words, a single compromised system might provide nearly unlimited Game Over.O r Not?

www.idmionline.com

Application Architecture, Development & Integration Summit Las Vegas, NV 29 November -1 December 2011

OCTOBER/NOVEMBER 2011 Global Information Management Conference in Amsterdam 22 November 2011 12:00 to 17:30 Aeon Plaza, Hotel Artemis, Amsterdam. NL.

Data Center & IT Operations Summit London, UK 28-29 November 2011

Online Information 29 November-01 December

2011

Data Center Conference Las Vegas, NV December 5 - 8 2011

Location: Olympia Grand Hall, London

IMPORTANT SHOW NEWS

Gartner Business Intelligence Summit London UK 6-7 February 2012

360°IT 2011 Cancelled We have received notification from Reed Exhibitions that the 360°IT Show due to take place in 2011 has been cancelled.

Gartner Master Data Management Summit London UK 8-9 February 2012

Coming a little over 24 months after the news of the ‘merging’ of the popular ‘Documation Show’, this leaves the AiiM Roadshow as the largest general IM event of the show calendar.

ALL IDMi ENTRIES FROM VARIOUS VENUE AND VENDOR SOURCES

E&OE

GARTNER EVENTS OCT/NOV 2011 Gartner Symposium/ITxpo Gold Coast, Australia 14-17 November 2011 Gartner Symposium/ITxpo Mumbai, India 21-23 November 2011 Gartner Symposium/ITxpo Tokyo, Japan 3-5 October 2011 Gartner Symposium/ITxpo Orlando, FL, U.S.A. 16-20 October 2011 Identity & Access Management Summit San Diego, CA 14-16 November 2011 Gartner Symposium/ITxpo Barcelona, Spain 7-10 November 2011 IDMi:071.28

Gartner Business Intelligence & Information Management Summit Sydney 21-22 February 2012 Gartner CIO Leadership Forum 27-28 February 2012 Dubai ALL GARTNER ENTRIES FROM G ARTNER.COM Events Calendar

E&OE

Event Inform ation W anted We are happy to prom ote your inform ation m anagem ent related events, sem inars, shows and exhibitions.

For more inform ation email:

Remember.... Check with the organisers for date or venue changes.

Diary ates 2011/12

events@ idm ionline.com Diary Dates 2011/2012

www.idmionline.com

ID Mi General Information IDMi is not only available in print, we produce 6 digital issues per year and 6 completely different print issues each year. With a great mixture of bi-monthly print magazines and digital issues released in between print months, we can keep you up to date on what is happening throughout the information management and data storage industries.

SUBSCRIPTIONS Subscribing to IDMi is great value and gives access to all 6 print issues and all 6 digital issues, plus a wealth of subscriber only content available via the website for a full year.

UK (6 x print & 6 digital issues) Overseas (6 x print & 6 digital issues) (electronic only, hard copy or both)

ÂŁ70 ÂŁ90

To subscribe: Visit: www.idmionline.com/subscriDtions.htm Tel: (+44) 01330 824826 Email: subscriptions@idmionline.com ADVERTISING Advertising with IDMi will open your business up to a large readership of industry relevant companies and potential customers. Our adverting space is competitively priced and special deals and discounted rates are available by contacting: advertising@idmionline.com

w w w .idm ionline.com

CRUSTY, introducing BOB The start of new look for PEN-ultimate. Will life ever be the same?

Time for Change?

Well if it’s good enough for Mrs CRUSTY to go out and buy all manner of expensive wall­ coverings and paint - it’s good enough for me to also re-decorate/re-model* my little corner of IDMi. 'D epending on which part o f the planet you are from.

So let me begin my changes by introducing to you the inspiration for the ‘toon below. The stories are based on anecdotes and observations by Bob, who is an old friend of mine. I first met Bob when he was the caretaker at one of our company buildings decades ago. Whilst many others would walk past Bob with ne’er a glance, a smile, or a cheery “Good Morning”, “Good Night”, or “Have a good weekend”, I always saw Bob as a source of valuable information.

His powers of observation were second to none, so he would have enjoyed my last column in the digital-only issue. (Again I have to ask - ‘Did you know there was a bi-monthly digital issue of IDMi which is an entirely separate magazine in the same style? No? Shame on you. digital@idmionline.com will solve that one for you.)

Anyway, going back to Bob. They say everyone has a story to tell, and Bob was no exception. With two degrees covering computer and information science, he had fallen on hard times thanks to scams, cons, a flirtatious (but gorgeous) nym******iac wife who ran off with some partially famous footballer and half of his wealth, and the vagaries of British Intelligence. The

company which owned our building had seen fit to take on Bob because he was .... available! They cared not one jot about his mastery of entities and database relationship management, or the fact that he was a certified practitioner of Prince 2. (The methodology that is - not that truly awful ‘pop’ star.) Nor did the landlords care one iota for Bobs project management skills, although as the our rented building was falling down around our ears, and he had to manage the con­ stant stream of builders, electri­ cians and carpenters, it was probably just as well that he was there.

I sometimes used to stop off at Bobs shack at the back of the underground car park on my way to/from the Executive Car Park. Occasionally we would have a cup of tea, and share ITrelated war-stories. The conflabs was always interspersed with valuable company intel given to me in such a chatty way, that Bob was wholeheartedly redeemed from being con­ sidered anything like a telltale/grass.

Over time, some absolute gems came forth. Gems such as “ ... and I see old Henry from accounts has just bought his wife a brand new Jaguar, and he drives a Range Rover too! Some people have all the luck.”

Valuable intel indeed, especially when you consider that ‘old Henry’ and his wife are now both being entertained at ‘Her Majesties Pleasure’, due to a short-term, but highly lucrative, embezzlement scam. A security breach which I am pleased to

"Sometimes beautiful things come out o f the heat o f the moment."

Anon.

Image © John Baker 2011

I

say, Bob plugged for us, but more of this in a moment.

When the buildings owners sold what was left standing of the pile, (to some young spotty oik whippersnapper who had just made a few shillings in a .com boom sale,) Bob was to be made redundant. Now, like Mrs CRUSTY, I do like a happy ending, so when Bob told me one frosty evening that he and his new and pregnant missus were to be penniless again, I decided to utilise Bob’s skills in a way which would not appear odd to the then-current IT team, but as it turned out, would ultimately lead to him working for my company.

So Bob was brought in as a consultant, with a remit to look at security and our systems in general. My view being that if anyone was going to be able to drive a Range Rover, and afford to give their wife a brand-new Jaguar, it was going to be me, and not a middle-management

It's our new content m anagem ent system Bob. You'll love working with the vendor again.

IDMi:071.30

PENultimate

6 months later, and all of our security gaps were plugged or removed from danger. The IT team seemed to like him, so we took him on to the payroll permanently. I reckon this shrewd move on my part save the company thousands of pounds to start with, and ultimately - millions.

I hope Bobs cartoons will see many of us through dark project times, and towards the bright shining light of Final Acceptance. ■ CRUSTY

Crusty will resume his unique view o f life in the next digital and print issues, and has a few more changes o f decor planned for PEN-ultime.

Live long, and prosper.

Vulcan (Star Trek) credo. crustv@ dmionline.com

BOBS IT 2011

^ N o probs Boss! ^ W h a t is it and who's |the vendor?

accountant living 10 times over ^'s means-

►

www.idmionline.com

SUPERLATIVE QUALITY & A COMPELLING PRICE You scan paper and m icrofilm ....

We provide Image Clean-up, Enhancements, OCR and so much more...

Adding Annotations Adjustment of Brightness & Contrast Black Border Removal Blank Page Removal Conversion from differing file-types Creating Multipage Documents Creation of Searchable PDF De-skew De-speckle Highlighting Image Cropping Image Rotation Masking OCR Page & Document Separator Removal Renaming Files Renaming of Folders We manage and monitor each specific project meticulously. Every single image (and not just a thumbnail) is audited and then verified.

Located in Mumbai in India, with hundreds of clients worldwide... We are at your service.

www.scanimcroSilm.com csp@scanmicroSilm.com Call: +44 800 689 9369

4*

by nextScan I lex Sc

Maxim ize Your Output and Investment for Scanning Rollfilm and Microfiche • Production multiformat scanner • Scan film, fiche and aperture cards in one unit Unmatched image quality and throughput with unique "Ribbon Scanning' software and patented LED illumination system A

W

l

Optional fiche autoloader • Enables faster batch scanning • Reduces operator intervention

nexfScan redefines microfilm and microfiche digitization by offering complete packages for scanning, from the most reliable hardware to cutting edge processing software.

nextScan The N ext G eneration in Film and Fiche Scanning Technology

+1 (208)514-4000

www.nextScan.com