Ψηφιακό Τεκμήριο

8.1.1 Acceptable Use Policy 31
Control
Rules for the acceptable use of information and assets associated with information
processing facilities should be identified, documented, and implemented.
Implementation guidance
All employees, contractors and third party users should follow rules for the acceptable
use of information and assets associated with information processing facilities,
including:
a. rules for electronic mail and Internet usages;
b. guidelines for the use of mobile devices, especially for the use outside
the premises of the organization;
Specific rules or guidance should be provided by the relevant management.
Employees, contractors and third party users using or having access to the
organization’s assets should be aware of the limits existing for their use of
organization’s information and assets associated with information processing
facilities, and resources. They should be responsible for their use of any information
processing resources, and of any such use carried out under their responsibility.
31 Από το ISO 27002
140