A document drawn up by an organisation that defines proper IT system usage (network, system or website), restrictions and the responsibilities of users. While users might be aware of their organisation’s AUP – they might not fully understand the rationale behind it or understand the important role they play in keeping the organisation’s data secure. Better user understanding usually equates with better adherence.

A document drawn up by an organisation that defines proper IT system usage (network, system or website), restrictions and the responsibilities of users. While users might be aware of their organisation’s AUP – they might not fully understand the rationale behind it or understand the important role they play in keeping the organisation’s data secure. Better user understanding usually equates with better adherence.