Requirement
"Clear desk rules for papers and removable storage media and clear screen rules for information processing facilities shall be defined and appropriately enforced."[1]
Explanation
Personnel should store documents in filing cabinets (preferably lockable) instead of leaving them unattended. Personnel should lock their workstation screen when not in use. The IT should configure systems to automatically lock their screen/session after a period of inactivity (e.g. 5 minutes).
