Acceptable Use
What is Acceptable Use?
The agreed-upon rules governing how users may utilize an organization's IT resources, including internet, email, and software.
Terms that appear alongside acceptable use
Each of these is named in at least one of the same controls as acceptable use. The number is how many controls name both.
- policy 14 shared controls
- asset management 8 shared controls
- nist 6 shared controls
- incident response 5 shared controls
- access control 5 shared controls
- governance 5 shared controls
- information security 5 shared controls
- audit 4 shared controls
Frameworks that govern acceptable use
What the standards actually require on acceptable use
Requirements naming acceptable use across 6 standards, quoted from the control text.
Agencies must have a BYOD acceptable use policy that each BYOD user has agreed to and signed.
new-zealand-information-security-manual-nzism::21.4.10.C.02 · 21.4.10.C.02 Signed BYOD acceptable use policy →Rules on how information and other associated assets may acceptably be used, together with procedures for handling them, are to be identified, written down and put into practice.
iso-27002-2022::5.10 · Acceptable use of information and other associated assets →Security awareness training must include awareness of acceptable use of end-user technologies consistent with the policies required under Requirement 12.2.1.
12.6.3.2 · 12.6.3.2 Awareness training covers acceptable use of end-user technologies →Document, communicate and issue acceptable use and safe handling instructions spanning approval for acquisition through disposal, classification and labelling, secure configuration, software versions and patching, unsupported software, installation restriction...
C5-AM-02 · Acceptable Use and Safe Handling of Assets Policy →Ensure the agency's ICT acceptable use policy and guidance comply with Standard B: Acceptable Use (section 6).
nsw-ai-operational-policy-2026::4.4 · 4.4 Align the ICT acceptable use policy with Standard B →All staff and service providers comply with the information security and acceptable-use policies that apply to them.
rbi-cybersecurity-framework-for-banks::42 · Para 42: staff and service providers comply with security and acceptable-use policies →Questions people ask about acceptable use
What is Acceptable Use?
Why is Acceptable Use important for compliance?
Which compliance frameworks address Acceptable Use?
Where can I learn more about Acceptable Use?
See how Acceptable Use applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.