Acceptable Use Policy Template
The Forum of Incident Response and Security Teams (first.org) has a great Acceptable Use Policy template available for download in their Best Practices Guide Library. You can download it here.
Here’s an excerpt from the Overview:
The purpose of this policy is to establish acceptable and unacceptable use of electronic devices and network resources at [Company Name] in conjunction with its established culture of ethical and lawful behavior, openness, trust, and integrity.
[Company Name] provides computer devices, networks, and other electronic information systems to meet missions, goals, and initiatives and must manage them responsibly to maintain the confidentiality, integrity, and availability of its information assets. This policy requires the users of information assets to comply with company policies and protects the company against damaging legal issues.
Other sections of the policy include:
- General Requirements
- System Accounts
- Computing Assets
- Network Use
- Electronic Communications
- Enforcement
An archived copy of the policy is here.