Which policy ensures that sensitive items are not accessible when not in use?

Which policy ensures that sensitive items are not accessible when not in use?

• A. Access Control Policy
• B. Clean Desk Policy
• C. Data Protection Policy
• D. Employee Conduct Policy

Answer: (B)

The Clean Desk Policy is designed to ensure that sensitive items, including documents and electronic devices containing confidential information, are not left unattended and are properly secured when not in use. This policy emphasizes the importance of maintaining a tidy workspace to protect sensitive information from unauthorized access, theft, or accidental exposure. By requiring that staff keep their desks clear of sensitive materials and secure those items, organizations lessen the likelihood of security breaches. This policy also encourages an environment of accountability, as employees are reminded to take responsibility for safeguarding sensitive data. In contrast, the other policies focus on different aspects of security or conduct rather than specifically preventing unauthorized access to sensitive items when they are not in use. Access Control Policies pertain to who can access certain areas or data, Data Protection Policies generally address the framework for handling data, and Employee Conduct Policies govern employee behavior without specifically addressing workspace security.

The Clean Desk Policy is designed to ensure that sensitive items, including documents and electronic devices containing confidential information, are not left unattended and are properly secured when not in use. This policy emphasizes the importance of maintaining a tidy workspace to protect sensitive information from unauthorized access, theft, or accidental exposure.

By requiring that staff keep their desks clear of sensitive materials and secure those items, organizations lessen the likelihood of security breaches. This policy also encourages an environment of accountability, as employees are reminded to take responsibility for safeguarding sensitive data.

In contrast, the other policies focus on different aspects of security or conduct rather than specifically preventing unauthorized access to sensitive items when they are not in use. Access Control Policies pertain to who can access certain areas or data, Data Protection Policies generally address the framework for handling data, and Employee Conduct Policies govern employee behavior without specifically addressing workspace security.