Policy Register
Every policy type · People

Clear desk and clear screen policy

The rules for papers, media and unattended screens in the workplace, and what is checked.

How the register reads it

Also calledclean desk policy
FamilyPeople
Document typePolicy. The regimes ask for the content, not the label; a line pasted as a standard, procedure, plan or schedule is placed here with the label noted.
Folds intoThe regimes accept it folded into the acceptable use policy; when neither is listed, the gap is counted once, under the parent.
Expected ownerThe information security lead (CISO or ISMS manager).
Review cadenceAnnual (the register's default: the clauses say planned intervals and on significant change, and do not fix a period).
On the gap list whennever on its own: the register recognises it and names the clauses, but no ticked regime lists it as a separate document (its parent, acceptable use policy, is).
TemplateClean desk and clear screen policy.

Which standards require it, and what each expects it to contain

2 requiring clauses, 2 regimes

Shown on a register for the regimes you tick; with none ticked, ISO 27001 is applied. Requirement text drawn from a human-verified compliance corpus under licence: the corpus statement of each clause, not the instrument verbatim.

ISO/IEC 27001:2022

ISO 27001 7.7 Clear desk and clear screen

Enforce clear-desk rules for papers and media and clear-screen rules for processing facilities.

What the ISO 27002 guidance expects the document to say: Requires defined and enforced rules for clearing papers and removable storage media from desks, and for clearing the screens of facilities used to process information.

Evidence an auditor accepts: The clear desk and clear screen rules, defining what must be cleared and to what standard; technical enforcement evidence for screens, such as enforced screen lock timeout configuration across the estate; evidence of physical checks or sweeps, with findings and follow up
Common gap: Policy exists but not enforced
Source: ISO/IEC 27001:2022; guidance ISO/IEC 27002:2022

ISO/IEC 27701:2025

ISO 27701 A.3.19 Clear desk and clear screen

The organization shall restrict the creation of hardcopy material that includes PII to the minimum needed to fulfil the identified processing purpose, in addition to the clear desk and clear screen rules that protect information left unattended.

Evidence an auditor accepts: Rules limiting the printing and copying of PII; print controls or monitoring on systems holding PII; clear desk and clear screen rules and spot check results
Common gap: PII printed routinely for convenience with no restriction
Source: ISO/IEC 27701:2025

Do this for every document on your list

Paste the list and get this reading for every document at once, with the owner and cadence against each, the clauses quoted, and the documents the regimes expect that the list does not carry. Eight documents free, no account.

Build a register

Background screening policy · Confidentiality and non-disclosure agreement