Acceptable Use Policies

An acceptable use policy (AUP) is a set of rules applied which restrict the ways in which the information technology resources may be used. AUP documents are written for corporations, businesses, universities, schools, etc. AUPs protect an organization by restricting what users can do and protect an organization from consequences if a user of their information technology does something that is not acceptable. The policies usually outline what are acceptable uses of the Internet, email, computers systems, networks, printers, etc. They also outline the consequences of users breaking the rules. The rules can pertain to use of email and the web for personal reasons, use of computers and networks for personal reasons, restrictions on pornographic materials, commerce, spamming, and also outline how a companies security policy relates to an individual.

Consequences of breaking rules can include verbal warnings or sometimes even dismissal. It is often common practice to ask new members of an organization to sign an AUP before they are given access to its information systems. For this reason, an AUP must be concise and clear, while at the same time covering the most important It should refer users to the more comprehensive security policy where relevant. Compliance with this policy should be measured by regular audits. There are many sample AUPs on the web that you can use as the basis for your company policies - http://www.scvo.org.uk/Images/Publications/acc_use_ICT.pdf is an excellent source. Also if you need help developing a policy and enforcing it then please do not hesitate to call us.