Writing Information Security Policies

Writing the AUP

Although the AUP is an important document, it should be short and to the point. One of the problems that you might face when writing the AUP is that you are now treading on the turf of different organizations. The organization’s Human Resources Department will want to ensure that the policy complies with both the organization’s hiring policies and the various labor laws with which they also must comply. Then there are those who negotiate with contractor and vendors who must include the AUP and the policies in the contract with those third parties.

As easy as the AUP sounds, some organizations find that it is the most difficult document to write. In one organization, the discussion table turned into a war-room mentality when ...