P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

← All 93 controls

Annex A 7.7

Clear desk and clear screen

Clear desk rules for papers and removable media, and clear screen rules for processing facilities, are defined and applied.

What an assessor looks for

This is verified by observation during the site visit, so the state of the office on the day is the evidence.

Where it usually fails

Screen locking is enforced technically while printed material is left unattended on desks and at printers.

Classification

Theme
A.7 Physical
Control type
Preventive
Security properties
Confidentiality
Cybersecurity concepts
Protect
ISO 27001:2013 equivalent
11.2.9

Control number and title are identifiers used as references. The classification above is our own analysis, aligned to the shape of the ISO 27002 attribute model rather than reproduced from it, and no text from the standard appears on this page. Last reviewed 2026-08-03.

Building the Statement of Applicability?

Record your applicability decision for this control and the other 92 in the browser-based builder. Nothing is transmitted, and you export the file at the end.

Open the SoA builder