This tool contains two sample policies that outline guidelines for a company's internet and intranet security and are a necessary part of an organization’s security strategy. This type of policy should apply to all users who access the company’s computing or networking resources, including permanent full-time and part-time employees, contract workers, temporary agency workers, business partners, and vendors.

In these samples, the company is responsible for properly securing the data maintained in and transmitted by its computing systems and telecommunication networks. Computer networks introduce new resources and new services through intranet and internet connectivity. This connectivity not only results in new capabilities but also new risks and threats.