The Clean Desk Policy: why it is so important

The clean desk policy can easily be classified among the “ABCs” of information security campaigns to raise awareness. It deals with basic care measures we must take to avoid exposing sensitive information.

Refrain from noting important data on post-its, which are then stuck to a computer monitor, don’t leave reports laying unattended at workstations, and don’t forget to lock the computer screen...

These simple habits are so easy to implement that it is precisely for this reason that they often end up being ignored by employees. Be aware that, whether in the corporate office or at home, temporarily sticking a note with access credentials on your computer or leaving it unlocked during a quick trip to the bathroom can pose a risk. A few minutes is all it takes to cause a great deal of damage.

Some basic tips

So, let's look at some crucial recommendations you should adopt in your daily routine to keep your company's information protected. 

• No post-its: never write down sensitive information such as passwords, goals, or projects on post-its. Although the classic picture of a professional surrounded by colorful stickers at his or her workstation has become fixed in our minds, the truth is that from an information security point of view, the fewer visible notes the better. It’s much safer to keep notes in cloud software, for example.

• Be careful with paper documents and physical media: Are you leaving your desk? Keep notebooks, reports, and physical media - such as USB sticks, CDs, or external hard drives - in an appropriately protected place. The level of security of these items should be proportional to their level of sensitivity. It is not an exaggeration to keep intellectual property secrets in a fireproof safe, for example.

• Not going to use it anymore? Dispose of it, but correctly: if your workflow still involves frequent use of printed documents, using a paper shredder is crucial.

• Always lock your devices: it doesn't matter if you're going to "be right back". When you leave your workstation, make sure you lock all devices left on your desk, such as your computer, laptop, tablets, and smartphones.

Doing your part

By taking these small steps in your daily routine you will help keep your company much more secure against cybercriminals. Encourage your colleagues to follow these habits as well, and always keep up with the latest recommendations provided by your information security team!