Acceptable Use Policy (AUP) is a collection of rules and regulations implemented by the owner or administrator of a web site, network, or large computer system. These rules imply or control the ways and means of using a site or system. AUP documentation is created and implemented for large corporations, small to medium size businesses, ISPs, educational institutions and web site owners to decrease the impact and possibility of legal action by end-users.
For example, new employees of a company are asked to sign an AUP document prior to being granted access to IT systems. The AUP will succinctly describe the dos and don’ts that have to be followed while using IT system resources. It should also clearly outline the applicable penalties involved, as and when rules are broken by a user. Regular audits are conducted to ensure organization-wide adherence to such policies.
AUP documentation is similar to Terms of Service documents that are used by websites or ISPs. Different labels include Internet and E-mail Policy, Network AUP, and Acceptable IT Use Policy. All these documents are created on the same principles of permitted network or IT resource usage.
General structure of AUP documents
AUP documents, irrespective of area of application, have a universal structure consisting of certain common elements. The common elements of an AUP document are as follows:
- Statement of philosophy
AUP documents typically begin with the statement of philosophy of the organization which is responsible for issuing the AUP. The statement should clearly outline the basis on which Internet access is being offered to users of their network.
- Code of conduct
The code of conduct specifies the conduct that users must follow when connected to a network or using network tools and applications. The code of conduct may include guidelines related to avoiding illegal activities, using suitable language when online and avoidance of online activities that may lead to identity theft or intellectual property misuse, viewing of inappropriate content online and so on.
- Consequences of code of conduct violations
This part of the AUP document specifies how deviations from the code of conduct will be handled and what penalties are enforced upon the user in question. The penalty may range from a verbal or written warning for a first-time offender to immediate termination of services or employment for repeat offenders.
- Disclaimers
Disclaimers are typically incorporated into an AUP document to protect an organization from liability in certain unique situations. For example, web sites can havedisclaimers to clearly state that they are not responsible for any errors or mishaps that may occur by the usage of the content, service, or product promoted by them.
