1. Wi-Fi password posted on the wall (“Office-WiFi / Password: Office123!”)
2. Unattended laptop left unlocked
3. Mobile phone left unattended on the desk
4. Password written on a sticky note (“New password Summer2024”)
5. Sensitive handwritten notes left in the open
6. Printed documents containing business information left unattended
7. Computer screens visible to others (shoulder surfing risk)
8. Drink next to the laptop (risk of accidental damage)
9. USB flash drive left on the desk
10. Wireless earbuds left unattended (could indicate the employee stepped away)
11. “Back in 5 min” note signaling the workstation is currently unattended
12. Unlocked backpack left in the office (possible storage of company devices or documents)
13. Phone connected by cable to the laptop (potential data transfer risk if untrusted devices are connected)
14. Food next to business documents and devices (spill/contamination risk)
15. Desk phone with a visible sticky note (could contain internal information)
16. Open notebook with visible notes
17. Whiteboard in the background with visible diagrams (potentially exposing internal projects or architecture)
18. Weak Wi-Fi password (“Office123!”) indicating poor password hygiene

Bonus discussion points (less obvious)

• Is the laptop protected with full-disk encryption?
• Is MFA enabled?
• Does the laptop lock automatically when unattended?
• Are USB devices restricted by company policy?
• Are clean desk and clear screen policies enforced?