Definitions
Shoulder surfing
“Shoulder surfing or visual hacking” occurs when employees access or display sensitive information in a manner which is then seen, read, stolen or otherwise accessed by a curious individual or a malicious hacker.
Directive
All employees must secure documents and devices, or other items containing or providing access to confidential information, by clearing them from desks and other workspaces, or locking them away at the end of the day or when workspaces are otherwise unattended. Otherwise, these items are vulnerable to theft or other misappropriation by unauthorized persons.
Purpose
The purpose of this directive is to ensure that:
- unauthorized individuals cannot access or view confidential information because of documents or items left unattended on desks or in other workspaces
- workspaces convey a professional and otherwise positive corporate image
- employees and the organization can experience productivity gains and cost savings generated by clean, organized and uncluttered workspaces
