The clear-desk rule is not applied in the service desk area
Description
During the walk through the service desk area the auditors saw customer tickets, printed password resets, and a notebook with login details lying on desks at the end of the day. The clear-desk rule is part of the Physical Access and Visitor Management Procedure, but the team had not been told that it also applies to the service desk floor. No customer data left the building, so the audit rated the gap as minor.
Summary
On trackThis workflow is complete.
The clear-desk rule was introduced with the building rules, and the service desk engineers who started after that were never told about it during their induction.
The rule is now part of the induction of every service desk engineer. The team agreed on a short end-of-day walk, and lockable drawers were added to every desk.
Three unannounced walks through the service desk area found no tickets or notes left on the desks. The corrective action is effective.