Data Classification and Handling Policies
Left Unattended in Work Area
Protected Level 1:
- With approved procedures
- Physically secured if accessible by unauthorized individuals
Protected Level 2:
- With approved procedures
Protected Level 3:
- Yes
Additional Procedures
- When open for business, unattended areas should be kept secure and locked whenever possible. If a door to a restricted area can’t be locked, it should be closed.
- All protected information must be removed from desks and locked in a drawer or file cabinet when the workstation is unattended and at the end of the work day.
- Office doors should be locked when you leave.
- Be particularly careful that visitors can’t easily see computer screens.
- Physical access to sensitive office equipment should be controlled, including computers, printers, photocopiers, fax machines and file cabinets with paper records.
- File cabinets containing protected information must be locked when not in use or when not attended.