Understanding Acceptable Use Policies

By Author: Peter Wendt
Total Articles: 34
Comment this article

Introduction to Acceptable Use Policies

An acceptable use policy is a written document declaring the terms to which a user agrees to abide by in order to use the service in question. This policy could also be considered a list of rules for use on the website, network or large system of computers operated by the managers and owners in that particular instance. Usually, the acceptable use policies outline what can and what can't be allowed on the network, computer group or network. They often entail rules about language, software use, rules for interacting with other users, rules against abusing the software and more.

The Rules

Typically, an acceptable use policy will outline what would be considered unacceptable behavior by the owners of the service of which the rules are written for. An acceptable use policy could also be thought of as a terms of service document. Acceptable use policies often work in place of terms of service documents. It is often impossible to join a service without first agreeing to the terms put forth in the acceptable use policy.

In addition to the clear statement of what ...
... is expected of the users, sanctions should also be clearly defined in an acceptable use policy. Sanctions, otherwise known as punishments, are what a user should expect should they violate the terms of the acceptable use policy document. These punishments and sanctions usually include some type of suspended privilege from the use of the service. Frequent offenders are typically banned altogether from the service.

Companies should be engaged with the use of any proprietary software and provide security awareness training to all employees who will be responsible for executing acceptable use of any given software or product.

Self-regulating Acceptable Use

One of the major philosophies of the service owners who write the acceptable user policy is that the users of the service should be regulating and governing themselves. An organization using the document of rules may focus on telling the user that their actions are their own responsibility, and that if every user takes responsibility for their own actions, the service will be much more enjoyable for everyone. Nobody actually wants to enforce the terms in the acceptable use policy, but there are intended to keep the service running smoothly and without issue.

Final Word on Acceptable Use Policies

The community of users who are present at a particular service must do their part to uphold the acceptable use policy document. It is like a contractual agreement between two businessmen. The people running the service are promising to continue to provide the service as long as the user follows the code of conduct and the user will agree to follow the code of conduct as long as the owner continues to deliver the service in the correct manner. IT security training and acceptable use policies themselves are vital to the everyday flow and regular use of the service for which it was intended.