7.7 Clear desk and clear screen

Organizations should create a clear desk and screen policy for appropriate people. The policy should include guidelines such as securing sensitive information when workes do not use it, protecting user devices with locks, and configuring computers to log off automatically. Printers should have an authentication tool to ensure only the originator can retrieve printouts. Sensitive documents should be securely stored or otherwise eliminated. Pop-ups images should be configured appropriately and whiteboards cleared of sensitive information when no longer used. Finally, a final review of the premises before vacating to ensure no assets are left behind.