Docy Child

IT-11 Acceptable Use

Estimated reading: 1 minute 601 views

What is this control about?

An acceptable use policy communicates the set of rules to be followed by a company’s employees.

Available tools in the marketplace

 Security Officer Tools
No tools recommendation for this section

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

Control implementation

Note: This control is 100% automated by TrustCloud. Upload your policy or leverage TrustCloud built-in policy to enjoy the benefit of automation

For a manual implementation:

Create an acceptable use policy with the following components:

  • a definition section
  • a policy statement
  • an acceptable uses section
  • an unacceptable uses section
  • a violations/sanctions section

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

  • Provide the most up to date acceptable use policy

Evidence example

From the suggested action above, an example is provided below.

  1. Provide the most up-to-date acceptable use policy.

TrustCloud provides an Acceptable Use policy out of the box

acceptable use policy





Join the conversation

Twitter Facebook LinkedIn

❤️  Joyfully crafted by a 100% distributed team.