Glossary · Foundations
Acceptable Use Policy
A policy that defines how employees may use an organisation's systems, devices, and data, and what behaviour is prohibited.
Put the term into practice: Risk management software
An acceptable use policy (AUP) tells people what they can and cannot do with company laptops, accounts, networks, and information. It typically covers passwords, email, internet use, removable media, and personal use of work systems.
Because most incidents involve human behaviour, a clear AUP, acknowledged by staff, is a practical control. It also gives the organisation a basis for enforcement when rules are broken.
