Acceptable Use Policy

Company IT resources are provided for legitimate business purposes. Acceptable use includes:

• Performing job-related duties and responsibilities
• Professional communication with colleagues, customers, and business partners
• Research and information gathering related to work
• Professional development and training activities
• Reasonable and limited personal use that does not interfere with work duties or company operations

Limited personal use of company IT resources is permitted under the following conditions:

• Use is brief, infrequent, and does not interfere with work performance
• Use does not consume significant network bandwidth or system resources
• Use complies with all other provisions of this policy
• Use does not create any legal liability or security risk for the company

• Attempting to gain unauthorized access to systems, networks, or data
• Circumventing or attempting to circumvent security controls
• Sharing passwords or access credentials
• Using another person's credentials to access systems
• Probing, scanning, or testing system vulnerabilities without authorization
• Installing or using hacking tools or password cracking software

• Creating, distributing, or executing malware, viruses, or other malicious code
• Conducting denial-of-service attacks or other disruptive activities
• Deliberately damaging or destroying company systems or data
• Tampering with or disabling security systems or monitoring tools

• Installing software without proper approval and licensing
• Using unauthorized cloud services or file-sharing applications
• Connecting unauthorized devices to the company network
• Modifying system configurations without authorization

• Unauthorized access, copying, or disclosure of confidential information
• Storing confidential data on unauthorized systems or devices
• Transmitting sensitive data via unencrypted channels
• Using company data for personal gain or competitive advantage
• Removing or copying company data without authorization

• Accessing, storing, or distributing pornographic or sexually explicit material
• Accessing, storing, or distributing hate speech or discriminatory content
• Accessing, storing, or distributing violent or threatening content
• Creating, sending, or forwarding chain letters or spam

• Using company resources for illegal activities
• Pirating software, music, videos, or other copyrighted materials
• Violating export controls or international trade regulations
• Engaging in gambling or other prohibited activities

• Using IT resources to harass, threaten, or intimidate others
• Sending abusive, offensive, or discriminatory communications
• Impersonating others or misrepresenting identity

• Use company email for legitimate business purposes
• Exercise caution with email attachments from unknown sources
• Do not send mass mailings or spam
• Include appropriate disclaimers in external communications

• Use approved communication platforms only
• Maintain professionalism in all communications
• Do not share confidential information through unsecured channels

• Use company devices primarily for business purposes
• Keep devices physically secure at all times
• Report lost or stolen devices immediately
• Allow installation of company security and management software

• Personal devices must meet minimum security requirements to access company resources
• Install required security software as directed by IT
• Separate business and personal data as much as possible
• Company reserves the right to remotely wipe company data from personal devices

• Use only approved VPN or remote access solutions
• Ensure remote access connections are secured
• Do not allow others to use your remote access credentials