Dictionary · Certification Terminology
Acceptable Use Policy
Practice · Beginner
A written policy that tells users what they may and may not do with organizational systems and data. It sets expectations before a disciplinary or security decision.
It is the rulebook users can actually be shown: no sharing passwords, no illegal activity, and no storing company data in a random personal app. Training should match the document.
Example: The policy prohibits reusing a work password on a personal site and tells employees how to report a phishing message.
Common misconception
- A policy does not enforce itself. Technical controls and management follow-through make it real.