Security
at the workplace

The access regulations for DZ BANK buildings effectively prevent unauthorised persons from entering offices, corridors and meeting rooms. Nevertheless, strict rules also apply here - especially with regard to the security of documents, data carriers and access data to applications and systems. This is because of the residual risk of guests, cleaners, workmen or others gaining access despite access regulations.

For this reason, DZ BANK generally applies a clean desk policy. Of course, this is not primarily about tidiness. A clean desk policy is the standard for physical information and data security in companies. It states that documents, data carriers and IT equipment of any kind must not be left unsecured and unattended.
So when you move away from your workplace - even if it's just for a few minutes - the following applies:

• Lock PC access
• Do not leave any documents or data carriers with confidential or personal data behind
• Do not leave service cards or keys lying around
• Use lockable compartments and cabinets for documents or data carriers
• Always dispose of documents via document shredders or in data protection bins

Of course, this due diligence requirement also applies to work on the road or when working from home. If confidential documents become public, the damage to DZ BANK could be enormous. Therefore, always use a privacy filter on trains, at the airport or in the hotel lobby. These filters are available for laptops, tablets and smartphones.

You should also take care with phone calls: Do not conduct official conversations in busy places and keep sufficient distance from possible listeners. This includes voice assistants. And even in the intimacy of one's own four walls, there is no all-clear, because even family members or house guests are not allowed to see confidential data under any circumstances. Therefore, always block your PC access and, if possible, refrain from using physical documents at home and on the road altogether.

And if something does happen - an unauthorised person, a theft, a confidential document is lost - contact your branch data protection officer or IT Department immediately.