CLEAR DESK &

SCREEN
POLICY

1
© Distributed by Resilify.io under a Creative Commons Share Alike License.
Clear Desk & Screen Policy
Version Control
Owne Version Edited By Date Change History
r
IS Rep 0.1 Assent 19/01/2016 First Draft

Distribution
Held Format Location Comments
By
User Digital / Physical

Status
X Status Approved By Date
X Working DD/MM/YYYY
Draft
Provisional Approval
Publication

Classification
X Confidential
Restricted
Unclassified

Relevance to Standard

Standard Clause Title

[ISO 27001:2013] [A11.2.9] [Clear Desk & Screen Policy]

License

Licensed by Assent Risk Management via Resilify.io Under a Creative Commons Share Alike License.

2
© Distributed by Resilify.io under a Creative Commons Share Alike License.
Contents

Clear Desk & Screen Policy________________________________________________________________________2

Contents_______________________________________________________________________________________________3
Clear Desk & Screen Policy________________________________________________________________________4
1.0 Overview______________________________________________________________________________________4
2.0 Policy___________________________________________________________________________________________4
2.1 Clear Desk Policy During Working Hours___________________________________________________________4
2.2 Clear Desk Policy Outside of Office Hours___________________________________________________________4
2.3 Classification of Information_________________________________________________________________________4
2.4 Clear Screen Policy____________________________________________________________________________________5
2.5 Visitors & 3rd Parties at the Workstation____________________________________________________________5

3.0 Related Policies_______________________________________________________________________________5

3
© Distributed by Resilify.io under a Creative Commons Share Alike License.
Clear Desk & Screen Policy

1.0 Overview

This policy sets out the controls to protect the organisation’s information assets
whilst they are in use.

2.0 Policy

2.1 Clear Desk Policy During Working Hours

It is accepted that during working hours you may need easy access to
information in order to perform your role.

However, the classification of this information should be considered when

leaving information on your desk, in trays or otherwise unprotected.

When walking away from your desk for a period of more than 5 minutes,
all confidential information should be removed from sight and locked away.

Other classifications of information may be left on the desk, providing there

is reasonable protection to prevent unauthorized access or other
disruption or loss.

2.2 Clear Desk Policy Outside of Office Hours

Outside of office hours, all information, regardless of classification,

should be locked away to prevent unauthorized access and reduce the
fire hazard.

2.3 Classification of Information

Please refer to our Classification procedure.

4
© Distributed by Resilify.io under a Creative Commons Share Alike License.
 2.4 Clear Screen Policy

It is accepted that during working hours you may need to access digital
information in order to perform your role.

This may involve accessing information from various systems using

multiple windows.

When you have finished using a system or window, the account should
be logged out and the window closed.

When leaving your desk for any period, the computer should be locked
and require a password to reactivate.

2.5 Visitors & 3rd Parties at the Workstation

Occasionally there may be visitors or other 3rd parties on site. In these

cases, staff should consider the information that can be overlooked,
overheard, or otherwise gleamed by those 3rd parties.

In situations where 3rd parties need to join you at your workstation, close
all software screens (windows) down and turn over any paper documents
that are confidential in nature.

3.0 Related Policies

Classification & Handling

5
© Distributed by Resilify.io under a Creative Commons Share Alike License.