1.
1 Clear Desk & Clear Screen
Objective: The policy is outlined to provide Gore mutual with a document to protect information
stored in physical and electronic media and minimize the risk of unauthorized access.
Information is an asset that, like other important business assets, has value to Gore Mutual and
consequently needs to be suitably protected. The purpose of this policy is to establish the
minimum requirements for maintaining clean desks and clear screens and to ensure that, where
there is any confidential, restricted or sensitive Information that it is locked away and is out of
site.
1.1.1. Clear Desk Policy:
Employees are required to secure all sensitive/confidential information in their workspace at the
conclusion of the day and when they are expected to be away from their workspace for an
extended period of time. This includes both electronic and physical hardcopy information.
Mass storage devices such as CDs, DVDs, USB drives, or external hard drives must be treated as
sensitive material and locked away when not in use.
Printed materials must be immediately removed from printers or fax machines. Printing physical
copies should be reserved for moments of absolute necessity. Documents should be viewed,
shared and managed electronically whenever possible. Where appropriate, documents should
always be scanned to PDF and stored within the dedicated case file on organizations secure
servers.
All sensitive documents and restricted information must be placed in the designated shredder
bins for destruction or placed in the locked confidential disposal bins. Please refer to the Records
Retention Policy for additional information pertaining to document destruction.
File cabinets and drawers containing sensitive information must be kept closed and locked when
unattended and not in use.
Any visit, appointment or message books should be stored in a locked area when not in use.
The reception area can be particularly vulnerable to visitors. This area should be kept as clear as
possible at all times. No personally identifiable information should be kept on desks within reach
or sight of visitors.
Passwords must not be written down or stored anywhere in the office.
Keys and physical access cards used for access to confidential, restricted or sensitive information
must not be left in or on an unattended desk. Keys for desk drawers, cabinets and other secure
areas must be stored in the dedicated key safe.
1.1.2. Clear Screen Policy:
Computer workstations/laptops must be locked (logged out or shut down) when unattended and
at the end of the day. Portable devices like laptops and tablets that remain in the office
overnight must be shut down and stored away.
Computer screens should be angled away from the view of unauthorised persons.
Computer workstations must be logged off at the end of the working day, to allow security
updates to be installed during the evening.
The Windows Security Lock should be set to activate when there is no activity for a short pre-
determined period of time.
The Windows Security Lock should be password protected for reactivation.
Passwords must not be left on sticky notes posted on or under a computer, nor may they be left
written down and left in an accessible location.
Users should log off or lock their machines (by pressing the Windows key and L) when they leave
the room.
Whiteboards containing restricted and/or sensitive information should be erased.
Portable computing devices such as unused laptops, digital cameras and tablets must be locked
away in a drawer or the server room.
Mass storage devices such as CDROM, DVD or USB drives should be treated as being sensitive
data and must locked away in a drawer or the server room.