HP Enterprise printers and scanners - Imaging and Printing Security Best Practices (white paper)

Security Category Options
Disable Digital Sending Service.
Configure Embedded Web Server Password.
Disable Enable Host USB.
Enable HTTPS Setting to Encrypt all web communication.
Configure Encryption Strength to High.
Configure Open/Print from USB Device.
Configure the PJL Password.
Disable Printer Firmware Update.
Configure Restrict Color as desired.
Configure the Secure Disk Password.
Fax Category Options
Configure Fax Printing.
Blocked Fax List Settings.
Fax Header Settings.
Additional Fax Configuration
Configure Fax Speed Dials.
Lock Speed Dials.
MFP File System Options
Configure File System External Access.
Disable PJL.
Disable PostScript.
Configure Secure File Erase Mode to Secure Fast Erase or Secure Sanitize Erase.
Digital Sending Settings Options
Configure Auto Reset Send Setting to Delay before resetting the default settings and type a number of
seconds to delay.
Configure Default ‘From: Address.
Select Prevent user from changing the Default ‘From:’ Address.
Final configurations
Disable Direct Ports (wait for MFPs to restart).
Disable EWS Config. (Optional)