Dear All,
Good day!
To improve the security and confidentiality of information, clear desk policy for papers and
removable storage media and a clear screen policy for information processing facilities shall be
adopted. This shall reduce the risk of unauthorized access, loss of, and damage to information
during and outside normal working hours or when areas are unattended. The purpose of
this policy is to set forth the requirements to ensure that all work areas are clear of company
information, whether in electronic or paper form.
Clear Desk Policy
It is crucial to protect sensitive information from disclosure. Office space is frequented by visitors,
consultants, vendors, cleaning crews, maintenance, and fellow employees. Ensure employees
keep their workspace neat, if it is messy, they may not notice when something is missing.
Lock sensitive documents and computer media in drawers or filing cabinets
Physically secure laptops with security cables
Employees must secure workstation before walking away (Ctrl + Alt + Delete)
Employees should not post sensitive documents. Examples include:
o User IDs & Passwords
o IP addresses
o Contracts
o Account numbers
o Client lists
o Intellectual property
o Employee records
o Anything they wouldn't want disclosed
At the end of the day, all employees should take a moment to:
o Tidy up and secure sensitive material
o Lock drawers, file cabinets and offices
o Secure expensive equipment (laptops, PDAs, etc.)
Clear Screen Policy
With open plan offices becoming common employees could accidentally expose
confidential material.
Information can be read from the employee’s screen, especially when the employee’s
workstation is logged on and employees are away from the employee’s desk.
A Clear Screen Policy is an effective safeguard.
If employee’s screen is readable when employee is absent from employee’s desk or work
area, this may result in sensitive information being read and 'leaked' to unauthorized
persons.
When people can see when a sensitive system is being accessed, it facilitates either pre-
meditated or opportunistic attempts to read and copy the data when the PC is left
unattended, even for a short period.
Please do not keep any file, shortcut or diagram on the desktop ‘keep the desktop/screen clean.
Thanks & regards,