Cyber Tip:Clear Desk Policy: What it is, recommended best practice and how to implement.
A clear desk policy ensures that sensitive information, both digital and physical is protected when not in use. The policy guides employees on handling information and assets properly in their workspace. For example, it would include guiding employees on what to do with sensitive documents when not in use and inform what is expected when an employee would leave their physical desk for an extended period of time.
Best Practices include:
Secure Sensitive Information: Ensure that sensitive documents, files, and notes are properly stored in locked cabinets or drawers when not in use. Avoid leaving them on your desk where they can be easily accessed.
Minimize Visible Information: Avoid displaying confidential information on your monitor or desk. Use privacy screens if necessary to prevent others from reading your screen.
Use Document Holders: For documents you need to keep handy, use document holders that can be easily stored away.
Remove Media from Printers: Retrieve printed documents promptly from printers or copiers. Leaving sensitive information in the output tray can lead to data breaches.
Secure Personal Devices: If you use personal devices (such as smartphones or tablets) at work, keep them secure. Lock them or store them away when not needed.
Dispose of Waste Securely: Shred sensitive paper documents before discarding them. Don’t leave them in open trash bins.
Daily Clean-Up: At the end of each workday, clear your desk of all papers, notes, and any other materials.
Implement Clean Desk Checks: Regularly conduct checks to ensure employees adhere to the policy. Encourage a culture of compliance.