Policy templates/People & Workplace/Version 1.0

Acceptable Use Policy Template

Get the complete template Sign in

Summary

Defines acceptable use of organizational devices, networks, accounts, cloud services, software, and data. Covers user responsibilities, prohibited activity, secure communications, remote access, data handling, monitoring, and expectations for employees, contractors, and third parties.

Purpose

The purpose of this policy is to establish acceptable standards for the use of organizational IT assets and information. This helps ensure responsible behavior, protect against unauthorized access or data loss, and maintain the confidentiality, integrity, and availability of systems and data.

Scope

This policy applies to all employees, contractors, and authorized third parties who use or access organizational devices, networks, accounts, or data. It includes use of corporate devices, internet and email services, cloud platforms, third-party applications, and remote access.

Framework Mapping

Appendix A includes mappings to common security and compliance frameworks for this template.
ISO/IEC 27002:2022
5.10 Acceptable Use of Assets5.18 Use of Privileged Utility Programs
SOC 2 TSC
CC6.1: Logical accessCC1.1: Integrity and ethical values
NIST CSF v2.0
PR.AC-6: Least privilegePR.AT-1: Awareness training
NIST SP 800-53 Rev. 5
AC-6: Least PrivilegePL-4: Rules of Behavior

Complete table of contents

This preview shows the full structure of the template. Create an account or sign in to download the complete editable policy.
  1. 1. Purpose
  2. 2. Scope
  3. 3. Policy Statement
  4. 3.1 General Responsibilities and Device Use
  5. 3.2 Use of Technology Resources
  6. 3.3 Data Handling and Storage
  7. 3.4 Security of Devices and Access
  8. 3.5 Use of External Services and Tools
  9. 3.6 Security Incidents and Monitoring
  10. 3.7 Bring Your Own Device (BYOD) Security
  11. 4. Roles and Responsibilities
  12. 5. References and Related Policies
  13. 6. Definitions
  14. 7. Policy Exceptions
  15. 8. Compliance and Monitoring
  16. 9. Policy Review
  17. Appendix A: Framework Control Mapping
  18. Appendix B: Revision History
  19. Appendix C: Approvals

Download the complete acceptable use policy template

Use the full editable template as a starting point, then adapt it to your organization.

Create an account Sign in