Policy defining acceptable and prohibited uses of organisational IT resources.
An Acceptable Use Policy (AUP) defines what users can and cannot do with organisational IT resources—computers, networks, email, internet access, and data. AUPs typically cover personal use limitations, prohibited activities (illegal content, harassment), security requirements (password protection, reporting incidents), and consequences of violations. AUPs set clear expectations and provide basis for disciplinary action when violated. Users should acknowledge the AUP, typically at onboarding and periodically thereafter.
Why It Matters
The DSC Perspective:
AUPs set clear expectations for IT use. Without an AUP, addressing misuse is difficult. Ensure users acknowledge the policy and understand consequences of violation.