Data Classification and Handling Policies

Left Unattended in Work Area

Protected Level 1:

1. With approved procedures
2. Physically secured if accessible by unauthorized individuals

Protected Level 2:

1. With approved procedures

Protected Level 3:

1. Yes

Additional Procedures

• When open for business, unattended areas should be kept secure and locked whenever possible. If a door to a restricted area can’t be locked, it should be closed. 
• All protected information must be removed from desks and locked in a drawer or file cabinet when the workstation is unattended and at the end of the work day. 
• Office doors should be locked when you leave. 
• Be particularly careful that visitors can’t easily see computer screens. 
• Physical access to sensitive office equipment should be controlled, including computers, printers, photocopiers, fax machines and file cabinets with paper records. 
• File cabinets containing protected information must be locked when not in use or when not attended.