This tool contains two sample policies that establish standards and procedures for governing the acceptable use of technology and other information resources.

During this process, a company’s employees, contractors, interns, consultants and third-party affiliates, referred to as “users,” are granted access to the company’s information resources for the limited and express purpose of executing their job responsibilities. The company’s risk management group has a mission to protect and maintain the confidentiality, integrity and availability of the company’s information resources.