Security tips for enforcing a clean/clear desk policy and shredding

SteveLord

Trying to get the ball rolling on this as it is a major problem. People leaving case files with sensitive information on their desk overnight. Some cases are a box or two's worth and spread allover. To top it off, people make their own "shred boxes" and only empty them whenever they feel like or when the shredding service stops by (monthly maybe.) Too lazy to make the small walk to the copier room where the shred bin and shredder exist.

Problem I know I will face with enforcing this is space. People do have locked cabinets, but cubicle space i still very limited and our territory in this building is in between 2 other businesses, so there is no room to expand.

I do expect support from management on this, but it's one of those adjustments that will be hard for everyone else to follow through with. Anyone else have to go through something similar?

the_Grinch

Unfortunately, your only recourse will be pretty harsh. If you have management on board I think you do the following:

1. C-Level sends a memo to all employees stating the new policy
2. Said memo is posted throughout the offices
3. For a month nightly checks are made and "notes" issued for those not following the policy. For that month nothing other then the note and then a discussion takes place for not following the policy
4. After that month, nightly checks still happen, but now any "notes" get sent to HR and are placed in their file
5. Continue failure to follow the policy results in whatever management decides

Has to be across the board, meaning if a C-Level gets caught doing the same thing they get the same notes etc.