IT-11 Acceptable Use

What is this control about?

An acceptable use policy communicates the set of rules to be followed by a company’s employees.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• Acceptable Use example

Control implementation

Note: This control is 100% automated by TrustCloud. Upload your policy or leverage TrustCloud built-in policy to enjoy the benefit of automation

For a manual implementation:

Create an acceptable use policy with the following components:

• a definition section
• a policy statement
• an acceptable uses section
• an unacceptable uses section
• a violations/sanctions section

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide the most up to date acceptable use policy

Evidence example

From the suggested action above, an example is provided below.

1. Provide the most up-to-date acceptable use policy.

TrustCloud provides an Acceptable Use policy out of the box