- of

1. Computer SecurityProhibit users from logging into any account other than their own, or allowing others to log on with their credentials or use their systems when they are logged in.
2. Computer SecurityConsider requiring employees to lock down workstations when away from their desks, and prohibit disabling or working around security features.
3. Computer SecurityAddress handling of email attachments and unauthorized software and unauthorized copying of company information to removable media or outside the network.
4. Computer SecurityDefine computer vandalism, spell out exactly how employees should handle security problems that come to their attention.
5. Permitted ActivitiesBe specific. Say "must," not “should.” Define items like “proprietary information”. Set policy for personal use of corporate email accounts, etc.
6. Prohibited ActivitiesBe specific about things like email usage, images containing sexually explicit, pornographic, or offensive material, etc.
7. Prohibited ActivitiesBe specific about browsing online game or gambling sites, or any activity that violates local, state or federal law; include the exact text of regulations.
8. Prohibited ActivitiesBe clear about communications that disclose any confidential information about the company, its clients, or partners.
9. Prohibited ActivitiesMake sure employees know the network cannot be used to solicit for any non-company-sponsored organization without prior written approval.
10. Social MediaPosting with someone else’s identity or manipulating social media conversation in any way is prohibited.
11. Social Media Spell out who has access to what, according to job needs. Strike a balance between personal use and workplace productivity.
12. Social MediaBe clear on what's inappropriate for employees to post; be specific about proprietary information and confidential data, legal matters, and individual privacy.
13. EtiquetteNo spam, nothing off-color, offensive, obscene, or harassing based on race, national origin, gender, sexual orientation, age, disability, religious belief or any other characteristic protected by federal, state and/or local law.
14. EtiquetteWhen disagreeing with others, employees should be polite and appropriate, knowing that whatever they publish may be lingering on the Internet for a long time.
15. Resource UseHave clear policy on attaching personally owned laptops and other devices to the company network.
16, Computer Vandalism/HarassmentDefine activities, e.g., illegal file sharing, harassing or threatening content, phishing etc., that won't be tolerated.
17. Employee PrivacyBe honest about any monitoring that may occur. Articulate a privacy policy. Make sure employees know that data created on corporate systems remains the property of your company.
18. Enforcement and Consequences for NoncomplianceSpell out penalties for AUP violations, including any civil and/or criminal penalties as well. Only set policies that you intend to apply equally and enforce.
19. Revisions and UpdatesInclude provisions for regular revisions, updates, and notifications. Post the most current AUP, establish a periodic update process.
20. Revisions and UpdatesAppend a FAQ section. Encourage employees to submit questions and suggestions. Meet to discuss.