Policy
Acceptable Use Policy
This policy defines acceptable use of information systems, devices, networks, and data by all authorized personnel. It establishes the boundaries of permitted activity, prohibited behaviours, and personal use expectations. All personnel must acknowledge this policy annually.
- Type
- Policy
- Version
- 1.3.8
- Date
- 2026-10-13
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material threat, framework, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Acceptable use
- 4. Prohibited activities
- 5. Collaboration platform and social engineering awareness
- 6. Remote access and BYOD
- 7. Monitoring
- 8. Violations
- 9. Acknowledgement
- 10. Framework alignment
Frameworks it maps to
Related documents
- Information Security Policysecurity
- Security Awareness and Training Standardsecurity
- Authentication and Password Management Standardsecurity
- Bring Your Own Device (BYOD) Policysecurity
Next
All Documents