Jump to content

Clear Desk and Clear Screen Policy

From HEIN+FRICKE

1. Purpose

This policy ensures that sensitive information whether digital or physical is protected at all times. It reduces the risk of unauthorized access, data breaches, and loss of confidential company information by requiring employees to maintain a clean workspace and secure digital screens.

2. Scope

This policy applies to all employees, interns working in the office, remotely.

3. Clear Desk Requirements

Employees must ensure:

  1. No sensitive information (printouts, notes, confidential files) is left unattended on desks.
  2. Access cards, IDs, and keys should not be left in open areas.
  3. Whiteboards containing sensitive project details must be erased after meetings.
  4. Printed documents must be promptly collected from printers.
  5. Waste documents should be disposed of using the company-approved shredding process.

4. Clear Screen Requirements

Employees must ensure:

  1. Lock screens (Win+L) whenever leaving their workstation.
  2. Auto-lock settings must remain enabled as configured by the IT team.
  3. Confidential data should not be displayed in public/shared areas.
  4. Unauthorized individuals must not have visibility of sensitive information on screens.

5. Handling Confidential Information

  • Confidential files should only be accessed when required for work.
  • Do not leave laptops/mobile devices unattended in meeting rooms, common areas, or vehicles.
  • Printed confidential documents must be minimized; digital forms should be used whenever possible.

6. Printing & Document Disposal

  • Sensitive documents must be retrieved immediately after printing.
  • Confidential waste bins must be used for disposal.

7. Remote Work Requirements

Employees working remotely must:

  • Maintain a clean workspace at home, free from unauthorized access.
  • Ensure family members or visitors cannot view company information.
  • Lock devices when stepping away, even at home.

8. Prohibited Practices

  • Leaving laptops, documents, or sensitive materials unattended.
  • Writing passwords on paper, notebooks, or sticky notes.
  • Allowing unauthorized users to access company systems or view screens.
  • Keeping printed confidential information on desks overnight.

9. Monitoring & Compliance

  • The company may conduct random audits of workspaces and screens.
  • Non-compliance may result in disciplinary action according to company policy.

10. Policy Review

This policy will be reviewed annually and updated as required.