Skip to main content
All measures

Measure · ISO 27001 and other standards

Protect desks and screens

Set up workplaces so that documents, removable media and screens remain protected when unattended. Explain the applicable rules and check their use in an everyday situation.

Accountable: Responsible line managerReviewed

Reuse existing records

Keep Working securely as the authoritative source of rules. The Clean Desk excerpt makes them accessible without creating a second source. Information classes remain in Protecting information. Reuse existing device management, storage and your task workflow.

What to do

  1. 1

    Clarify rules and prerequisites

    Check which documents, removable media and screen contents could be seen by unauthorised people at your workplaces. Establish their protection needs using your information classes and rules, and check whether suitable storage, disposal and device protection are available.

  2. 2

    Introduce the rules and put protection in place

    Have the appropriate role approve the adapted rules and explain them to the people concerned. Work with IT to configure a suitable automatic lock that requires authentication to unlock, and provide protected storage and the agreed disposal route.

  3. 3

    Check an everyday situation

    Check a typical situation, such as leaving a workplace or sharing a screen. Address deviations in the existing task or change record, assign an owner and verify that the correction works before closing it.

Worked example

A laptop stays unlocked during a break

A confidential customer document is visible on an unattended laptop in a shared office.

Screen lock
DecisionIT configures the appropriate automatic lock. The team locks screens when leaving; the responsible person checks that unlocking requires authentication.
EvidenceThe existing lock setting and, where a correction was needed, its verified completion in the existing task or change record.

Record the result

  • Applicable rules and their communication through the existing briefing or training workflow.
  • The existing lock setting and protected storage. Necessary corrections and their verified completion are recorded in the existing task or change record.

Common implementation mistakes

The excerpt becomes a second source of rules

Generate it from the current version of Working securely and make that relationship clear. Do not maintain the same rules independently.

Confusing acknowledgement with implementation

A reading acknowledgement does not show whether a device is locked or confidential documents are stored securely. Check the actual situation.

Reuse the implementation across requirements

The references below show which requirements the measure contributes to.

View controls and standards
  • A.7.7 · Aufgeräumte Arbeitsumgebung und BildschirmsperreGerman guide

    Rules, setup and an everyday check support protected desks and screens. Continued application remains necessary.

  • TISAX · 3.1.1

    VDA ISA 6.0.3 · Partial overlap

    Behavioural rules support the security zone concept. Zone boundaries, protection needs and further safeguards still require separate decisions and implementation.

    Reference

Templates for your implementation

Related resources

Sources and further reading