To protect personal computer systems from theft and unauthorized use, desktop systems should be located in secure areas within the agency or should be physically attached to a desk or table. If the computer has a lock, it should be locked whenever the system is unattended and the key should be kept in a secure location. There are a variety of devices that can be used to secure a personal computer to a desk, including cables, adhesives, and bolt on brackets. If the personal computer is located in a private office, the office should be locked when it is unoccupied. Personal computers having access to local or wide area networks as clients or terminals to the server should never be left unattended while logged on to the network.
Floppy disks are extremely portable.
Confidential information can be copied to floppy disks and easily removed from the premises. To ensure that information is properly handled, office policy and procedures should address the storage and handling of confidential and sensitive information that has been copied to floppy disks. Floppy disks are easily destroyed by heat, magnetic fields, or other improper handling such as touching the recording surface. To avoid loss of information, personnel should be trained in the proper handling of floppy disks. Floppy disks should not be left in areas where they will be exposed to heat.