When a company thinks about security, it usually jumps straight to antivirus and passwords. But the leak that actually happens in an office is rarely a sophisticated attack. It is a file left on a desk, a laptop no one locked over lunch, or a screen full of client data facing the hallway. That layer, the physical one, is governed by furniture, and it is where a well-equipped office quietly adds or subtracts security every day.

This article focuses on what an office furniture maker can actually stand behind: how the workspace protects documents, equipment, and screens. The digital side, still necessary, sits at the end as context, because that is the IT team’s job. The desk has its own security front, and ISO 27001, the international standard for information security management, devotes a full set of physical controls to it.

The most common leak is physical, not digital

The Ponemon global visual hacking experiment, sponsored by 3M, found that in roughly 9 out of 10 attempts an unauthorized person could read sensitive information just by walking through an office: open screens, papers in plain view, passwords stuck to a monitor. None of those cases needed a single line of code.

That reframes the question. Instead of asking only whether the antivirus is good, ask what someone could see or walk off with during a five-minute visit. The answer depends on how the space is furnished: whether there is somewhere to lock things away, whether screens face away from foot traffic, whether the desk can be cleared without effort.

Lockable storage: where sensitive things live after hours

The most basic control, and the most ignored. A lockable lateral file for records, a pedestal under the desk for the laptop and external drives, a locker for hybrid teams with no fixed seat. ISO 27001 treats the protection of physical assets and storage media as part of information security, on the same footing as data backups.

The rule is simple: anything holding client or company data needs a locked place it actually fits in. A drawer that will not close, or one too small for the real volume of paper, forces people to leave things out, and that is where any policy dies. For offices with desk rotation or hybrid work, personal lockers solve the question of where to safely put your things without assigning a fixed desk to everyone.

Screen privacy: who sees what you see

On an open floor, an HR screen showing payroll can sit in full view of anyone heading to the break room. A divider panel does more than break up space, it defines sight lines. A panel between 30 and 120 centimeters, depending on how much privacy the role needs, cuts the angle from the aisle and from neighboring desks.

Orientation matters as much as the panel. Facing monitors away from the window and the main walkway reduces shoulder surfing at no cost. In customer service, finance, legal, or executive areas, where on-screen information is sensitive by default, screen privacy belongs in the floor plan from the start, not as a patch after the first complaint.

A clean desk, for real

ISO 27001 includes a specific clear-desk and clear-screen control: no documents or devices left unattended when the person steps away. It reads like an etiquette rule and it is among the controls auditors check most, because it targets the physical leak head-on.

The catch is that a clean-desk policy taped to the wall does nothing on its own. It needs furniture that makes it easy. If putting things away takes thirty seconds and there is room for it, people do it; if it means hunting for a drawer that locks, they do not. Enough storage within reach, a lock that works, and a surface that clears fast are what turn the policy into a habit.

Cable management: less tampering, fewer accidents

A desk with loose cables up front invites someone to plug in a USB that should not be there, and makes the surface hard to clear. Trays, raceways, and grommets keep connections tidy, out of sight, and out of casual reach. They also solve the most down-to-earth risk: the stray cable that trips someone or gets yanked and drags equipment down with it.

Cable management is also what makes a clean desk possible. A workstation where the wiring is handled by design clears in seconds at the end of the day. One where every cable hangs its own way never really gets clean, whatever the policy says.

The digital layer, in its place

None of this replaces digital hygiene, it complements it. Keep the operating system and software patched, since most updates close holes that are already public. Run reputable, up-to-date antivirus. Set screens to lock automatically after a few idle minutes, the exact bridge between digital and physical: a locked laptop on a clear desk stops being a risk.

On passwords, one myth is worth correcting. Current NIST guidance (SP 800-63B) drops forced periodic changes in favor of long, unique passwords per service, a password manager, and multi-factor authentication. Forcing a monthly change only produces Company2026 and then Company2027. And no password helps if it is written on a sticky note on the monitor, which brings us back to the physical front.

How Gebesa builds this into a project

When we design an office, physical security does not arrive as a separate module, it arrives in the furniture decisions. Lockable storage sized to what the team actually keeps, not a token drawer. Panels and screen orientation where information is sensitive. Wiring built into the workstation, as in the Start line, configured with divider panels, cable organizers, and power outlets.

We are clear about the limit: furniture will not stop a hacker. It handles the physical risk that ISO 27001 does account for, and that front is won or lost in how the desk is equipped. If you want to review your office from this angle, the Gebesa team can help define the storage, screen privacy, and cable management each area needs. Request a quote or book a visit to fit it to your space.