Acceptable Use Control Set

This Acceptable Use control set / policy helps to ensure that employees, contractors and third party users understand their responsibilities. The control set / policy has been created by 6clicks as a baseline for your consideration when establishing your cyber and information security program.

Control sets / policies include a set of controls, in this case mapped to the requirements of ISO/IEC 27001, along with an associated set of policies, which we call statements. Statements are the individual responsibilities that you assign to people or groups within your organisation and can be associated with reminders/checks for ongoing performance management. This Acceptable Use control set / policy includes the following topics:

• General responsibilities
• Security awareness
• Inappropriate content
• Intellectual property
• Information classification
• Information handling
• Environmental awareness
• Electronic media handling
• Computer hygiene
• Mobile device management
• Personal use
• Other unauthorised uses
• Monitoring
• Misconduct
• Report suspected or actual issues