Physical Security and the Clean Desk Policy

Physical Security and the Clean Desk Policy
████████████ 🔒 Locked Password: qwerty123 BAD CLEAN DESK ✓ Lock screen when away ✓ Secure documents ✓ Badge in — don’t tailgate ✗ Passwords on notes ✗ Hold doors open

How physical security practices protect your organisation’s information.

Physical Security and the Clean Desk Policy

Digital security controls protect nothing if an attacker can walk up to an unlocked computer or photograph a whiteboard full of sensitive information. Physical security comes first.

Why Physical Security Matters

An attacker with physical access to a device can:
  • Boot from a USB drive to bypass Windows/macOS login entirely
  • Extract the hard drive and read it in another machine
  • Install a hardware keylogger to capture every keystroke
  • Access files left visible on screen
  • Take photographs of sensitive documents, whiteboards, or screens
⛔ Important
A locked door and a clean desk prevent attacks that no antivirus or firewall can stop. Physical access bypasses most technical security controls you have in place.

The Clean Desk Policy Checklist

✗ NON-COMPLIANT DESK Customer DB Screen unlocked UNATTENDED! Password: Summer123! CONFIDENTIAL Customer data ✓ COMPLIANT DESK 🔒 Screen locked Clear surface — no documents visible SHRED 🗑 Sticky note password • Unattended unlocked screen Confidential papers left visible on desk Locked screen • No paper left on desk Sensitive docs filed or shredded

The Screen Lock Rule

Lock your screen every time you leave your desk, even for two minutes.
  • Windows: Win + L
  • macOS: Cmd + Ctrl + Q
  • Or set auto-lock to trigger after 2–5 minutes of inactivity
✓ Key Point
Make screen locking a reflex. The keyboard shortcut takes less than a second. Practise it until you lock the screen before you stand up.

What Must Never Be Left Visible

Item Safe Handling
Printed customer/patient data File or shred immediately, never leave on desk
Passwords written down Never write them down. Use a password manager
Confidential meeting notes Lock in a drawer; shred when no longer needed
USB drives with data Lock away or return to IT when not in use
Visitor passes / ID cards Collect and deactivate immediately after the visit
Whiteboards with sensitive info Erase before leaving the room

Tailgating and Access Control

Never hold secure doors open for people you don’t know. Direct unrecognised visitors to reception. Your access policy requires it.
If you see someone in a secure area without a visible badge, report it to security or reception immediately.
⚠ Warning
Attackers dressed as delivery drivers or maintenance staff are a common physical security threat. Always verify with reception or your facilities manager before allowing anyone unescorted access to server rooms, storage areas, or other secure zones.

Printing Sensitive Documents

  • Retrieve printed documents immediately, don’t leave them in the tray
  • Use PIN-protected printing (where available) so documents release when you are standing at the printer
  • Shred sensitive documents using a cross-cut shredder. Strip-cut shredding can be reassembled

Mobile Techs IT Consulting

Would an unlocked screen undo all your security?

The best firewall in the world can’t stop someone sitting down at an unattended, unlocked PC. Mobile Techs IT Service helps Gold Coast businesses close the physical gaps: automatic screen-lock and device policies enforced across every machine, full-disk encryption so a stolen laptop or drive is useless, secure wiping and disposal of old computers and hard drives, and practical office IT setups that make the secure way the easy way. Home users welcome too, on-site or remote, anywhere in Australia.

Tighten up the physical side Talk to us first

Call 1300 644 588  ·  office@mobiletechs.com.au
More on our managed IT services and remote security audit.

Mobile Device Security
Mobile Device Security
June 30, 2026
Ransomware — What It Is and How to Avoid It
June 30, 2026
Ransomware — What It Is and How to Avoid It