User responsibilities

Objective: To prevent unauthorised user access and compromise or theft of information and information processing facilities.

The co-operation of authorised users is essential for effective security and they should be properly educated to understand their responsibilities.

Password use

Users should follow good security practices in the selection and use of passwords.

Unattended user equipment

Users should ensure that unattended equipment has appropriate security protection.

Clear desk and clear screen policy

A clear desk and clear screen policy should protect information from unauthorised access and loss or damage.