Skip to content

Clear Desk & Clear Screen Policy

Purpose. Soon has no offices — everyone works from home or on the move. This policy keeps Soon information from being seen or taken in those settings: unlocked screens, visible papers, and shoulder-surfing in public.

1. Scope

All personnel, wherever they work (home, co-working spaces, travel). Applies to screens, paper, and anything else displaying Soon or customer information.

2. Policy

2.1 Clear screen

  • Devices must lock automatically after a short idle period. The screen-lock timeout is 5 minutes, set as a baseline requirement in ISMS-DOC-A08-1-3 §2 and verified by quarterly attestation. Formerly asked whether it is enforced via device management.
  • Personnel must lock their screen whenever they step away from the device, even at home.
  • On video calls and screen shares, only the content being discussed may be visible: close or hide windows, tabs, and notifications containing customer or confidential data before sharing.

2.2 Working in public

  • In public spaces (cafés, trains, co-working), position screens away from onlookers and avoid working on Confidential or Restricted information where others can see. A privacy filter is recommended for frequent travel.
  • Devices must never be left unattended and unlocked in public.

2.3 Paper and physical items

  • Work should be paperless by default. Printing customer or confidential data is discouraged.
  • Any sensitive paper notes or printouts at home must be stored out of sight when not in use and destroyed (shredded or torn beyond reconstruction) when no longer needed — never put whole into household waste.
  • Credentials must never be written down; use the password manager per the Access Control Policy.

3. Roles & responsibilities

  • All personnel: follow this policy in every work setting.
  • Security responsible: configures/verifies screen-lock enforcement and includes this policy in security awareness.

Change log

Version Date Author Comments
0.1 2023-10-23 Olaf Jacobson First draft document
0.2 2026-07-18 Andrea Cardinali Rewritten lean and Soon-specific (ISMS overhaul); reframed for fully remote working