A.7.7 Audit Checklist

When to use this

Use this checklist during an internal audit of clear desk, clear screen, printer, fax, and unattended information controls.

Related controls

• A.7.7 Clear Desk and Clear Screen
• A.7.7 Audit Evidence Pack
• Clear Desk and Clear Screen Checklist
• Printer and Fax Security Checklist

Audit checklist

• Confirm clear desk and clear screen rules are documented.
• Confirm rules align with information classification.
• Check unattended desks for sensitive papers or removable media.
• Check unattended workstations for locked screens.
• Review auto-lock settings.
• Inspect printers and fax machines for exposed sensitive output.
• Confirm staff know how to use secure printing.
• Check visitor/cleaner exposure controls.
• Review inspection, warning, and corrective-action records.

Findings table