What is an Acceptable Use Policy (AUP)?
D1 · General · CompTIA Security+ SY0-701An AUP (Acceptable Use Policy) is a policy document that defines the rules governing how employees, contractors, and others may use an organization's IT systems, networks, devices, and internet access.
Typical AUP content: permitted and prohibited activities, privacy expectations, monitoring disclosure, consequences of violations, social media guidance, BYOD rules.
All employees and contractors should sign the AUP as part of onboarding. It provides legal protection and sets expectations.
Typical AUP content: permitted and prohibited activities, privacy expectations, monitoring disclosure, consequences of violations, social media guidance, BYOD rules.
All employees and contractors should sign the AUP as part of onboarding. It provides legal protection and sets expectations.
AUPs are a foundational security policy. They must inform users that their activities on company systems may be monitored. Signed AUPs are important for legal action against policy violators. On the exam, when asked about communicating security expectations to users — AUP is the answer.