Checklist-Key elements of a computer use policy

A computer use policy should clearly inform employees that the information and tools created by and accessed from their employer's computer system belong to the company. In addition, the policy should state that employees have no expectation of privacy on the company's computer system. What other elements should the policy contain? The General Accounting Office, in a study on computer use policies and employee monitoring, GAO Report 20-717 (September 2002), identified the following seven key elements that should be included:

• monitoring use of proprietary assets;

• establishing no expectation of privacy;

• improper employee use;

• allowable employee uses;

• protecting sensitive company information;

• disciplinary action; and

• employee acknowledgement of policy.