How to write a proper Internet usage policy

Abstract

Increased usage of the Internet at work has prompted organisations to write Internet Usage Policies to establish appropriate use. This article addresses the main components of an Internet Usage Policy, including security, monitoring and filtering, privacy rights, intellectual property, organisation representation, acceptable personal use, unacceptable personal use, investigation of violations and corrective action, and notification of policy. Each section explains what should be written in the policy, and how it should be written. Internet Usage Policies should be tailored to fit the organisation’s culture. Management must enforce the policies, but be careful not to act like big brother policing every activity employees engage in. Organisations will find that Internet Usage Policies provide a written basis for discouraging Internet misuse, but ultimately the organisational culture will have the strongest effect on employee behaviour.