Add a screenlock with short lock period

Automatic locking, after a pre-determined period of inactivity (usually a few minutes), means that a user does not need to worry about leaving their device open to be accessed; it locks itself and is protected by a pin code (or other 1FA system).

An unlocked workstation or mobile device can yield information when it is manipulated by a third person, who is either physically present or accesses the station by a cabled and/or wireless connection; the user will not even be aware of the data theft.

Always lock work stations (CTRL + ALT + DEL or Windows Key + L) when absent and also secure laptops with a laptop lock and a key to prevent theft.