Chapter 11. Acceptable Use Policies

IF YOU HAVE FOLLOWED THE OUTLINE OF THIS book, you should have completed most of the work on your organization’s information security policies. With the bulk of the work completed, you can turn your attention to a summarized version called an Acceptable Use Policy (AUP).

An AUP is a document that summarizes the overall policy for the users. The AUP can contain parts of the organization’s policies outlining the user’s security responsibilities. Most of the time, they are highlighted components and written in plain language. A successful AUP is short and to the point. Ideally, the AUP should only be a few ...

Get Writing Information Security Policies now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.