Data Classification and Handling Policies

Left Unattended in Work Area

Protected Level 1:

  1. With approved procedures
  2. Physically secured if accessible by unauthorized individuals

Protected Level 2:

  1. With approved procedures

Protected Level 3:

  1. Yes

Additional Procedures

  • When open for business, unattended areas should be kept secure and locked whenever possible. If a door to a restricted area can’t be locked, it should be closed. 
  • All protected information must be removed from desks and locked in a drawer or file cabinet when the workstation is unattended and at the end of the work day. 
  • Office doors should be locked when you leave. 
  • Be particularly careful that visitors can’t easily see computer screens. 
  • Physical access to sensitive office equipment should be controlled, including computers, printers, photocopiers, fax machines and file cabinets with paper records. 
  • File cabinets containing protected information must be locked when not in use or when not attended.