Description
During the walk through the service desk area the auditors saw customer tickets, printed password resets, and a notebook with login details lying on desks at the end of the day. The clear-desk rule is part of the Physical Access and Visitor Management Procedure, but the team had not been told that it also applies to the service desk floor. No customer data left the building, so the audit rated the gap as minor.