Does anyone out there have a sample clean desk policy they would consider sharing? We are looking to implement one in reference to safeguarding customer information and customer confidentiality.

Thanks!

I'd be interested as well.

We have been struggling with this issue for 6 months. We are incorporating clean desk with taking files out of the building for business purposes. What a headache ! We are still months away from agreement.

We have made it policy that folks do clean their desks up and officers all have locks on their office doors, so that takes away the excuse that they couldn't put the loan files, etc. up. They just lock their doors and off they go. You could easily include this reference in your privacy or information security policy/procedures instead of having a stand alone policy for this issue. It will be hard in the beginning (oh, the whining!) but folks will get used to it and before long, they won't remember what it was like to not have to stash stuff away.

We have a policy - clean desk at the end of the day and privacy awareness during the day when customers are present.

You need to consider including the delivery of shedding each night to a locked bin as it seems common now for each person to have a box under their desk with sensitive material that may not make it to the shedding area for weeks. Of course, you can became real unpopular, real fast, by going around noting exceptions to policy.

Here is an excerpt from our Customer Information Security Policy :
8. ACCESS RESTRICTIONS AT PHYSICAL LOCATIONS
Documents with customer information are to be safeguarded at all times. This includes any document with customer information, for example: customer applications, customer research, returned statements, credit files, signature cards, customer receipts, and all reports containing customer information. Each department, branch office, and employee will comply with the following procedures.

· File cabinets, desk drawers, and credenzas containing documents with customer information will be locked at the end of each workday.

· Storage rooms containing documents with customer information and record retention areas will be locked at the end of each workday.

· Desks, workstations, and work areas will be cleared of all documents containing customer information when not in use. This includes the end of each workday, lunches, breaks, and meetings.

· Any customer, vendor, or other unauthorized individual entering a non-customer area without authority or prior approval must be approached for assistance or immediately reported to management.

· Employees accessing an area that is not pertinent to their responsibilities should be approached for assistance or immediately reported to management.

· Access to the main server room is safeguarded with a keypad to prohibit unauthorized access.

· Caution will be taken during conversations with customers to ensure that customer information is not overheard by anyone not authorized to have knowledge of such information.

· Customer information will not be discussed with or in the presence of anyone who is not authorized to have knowledge of such information.

· When documents containing customer information are discarded they will be immediately shredded or placed into a blue recycling bin for shredding.

Steve...LOL!

From Webster's III New Riverside Dictionary, Revised Edition, 2003, pg. 412:

Knit-pick (nit.pik) v. 1. The detail removal of particles from twiled or worsted cloth, serge, or a blend of wool. 2. The undue concern for trivial details. v. Informal nit-pick.

Paragon, the Eagle was the best, but that was probably too intimidating for the tea-drinking compliance crowd.

We have a Customer Information Security Policy and Customer Information Security Program as well as "Clean Desk Checklists" that are used monthly for each business areas for the monitoring portion of our program. If you send me your email address, I'd be happy to share a sample checklist with you.

Thanks Jan, that would be great.

You can send it to: ptate@ebank.ky

Thanks again

Would love to have that, too, Jan. Please send to barb.newman@gmail.com.

*raises hand*

me too! I would dearly like to see a "clean desk" checklist!

ctucker@twsb.com

Hello Jan,
Customer Information Security Policy is what I need to work on next. I would love to have a copy of your policy as well as the Clean Desk Policy. Please send to lpham@traditionbank.com

Thanks!

Jan - would you consider sending your checklist to us so that we could post it in the "Tools" on BOL? If so, send it along to me at hurst@bankersoline.com - and Thanks from all who will benefit!

Jan, I would like a copy of your checklist too please.
kbyrne@fnb-beatrice.com

Did this Clean Desk Policy get posted at BOL? If it did, I haven't been able to locate it. Thanks