Policy template

Acceptable Use Policy template

This policy exists to define how staff may use company information, devices, accounts and internet services. It applies to all staff and contractors using company equipment, accounts or information.

Create this policy

What the policy contains

General use
Communication and internet
Devices and workspace

Who is responsible

All staff and contractors
Managers
IT Manager

What you decide

Personal use of company equipmentNot allowed · Limited, tolerated · Allowed
Public generative AI toolsNot allowed · Approved tools only · Allowed without confidential or personal data
Use of company systems is monitored (staff are informed)

References covered

ISO/IEC 27001 Annex A: control 5.10
ISO/IEC 27001 Annex A: control 6.2
ISO/IEC 27001 Annex A: control 7.7
ISO/IEC 27001 Annex A: control 8.1
GDPR: Art. 29 processing under the authority of the controller
NIS2: Art. 21(2)(g) basic cyber hygiene practices and training

Other policy templates

Access Control Policy
Password Policy
Bring Your Own Device (BYOD) Policy
Remote Work Policy
Business Continuity Policy
Backup & Recovery Policy