Which of the following should be included in training to protect against information theft?

Including shoulder surfing and a clean desk policy in training is essential for protecting against information theft because these measures directly address two common vulnerabilities in data security.

Shoulder surfing refers to the act of an unauthorized person observing sensitive information as it is being accessed or entered, typically in public or semi-public spaces. Training focused on this issue helps employees recognize the importance of being aware of their surroundings when handling confidential data. By teaching individuals to be vigilant and to position screens away from prying eyes, organizations can significantly reduce the risk of sensitive information being stolen.

The clean desk policy complements this by advocating for the practice of keeping workspaces clear of sensitive documents and screens when not in use. This policy encourages employees to lock their computers and store confidential papers securely, minimizing the likelihood of leaving sensitive information exposed, which could be easily accessed by unauthorized individuals.

By incorporating these practices into training, organizations create a culture of security awareness that directly mitigates risks related to information theft, empowering employees to take proactive measures in their daily routines.