Acceptable Use Policy
I found a good example of an Acceptable Use Policy at the Asian School of Cyber Laws site here.
I like the section on Unacceptable Use. Here’s an excerpt:
The following activities are, in general, prohibited. Employees may be exempted from these restrictions during the course of their legitimate job responsibilities (e.g., systems administration staff may have a need to disable the network access of a host if that host is disrupting production services).
Under no circumstances is an employee of ASCL authorized to engage in any activity that is illegal under local, state, central or international law while utilizing ASCL-owned resources.
The lists below are by no means exhaustive, but attempt to provide a framework for activities, which fall into the category of unacceptable use.