Web Usage Policies
To leverage the benefits of the Internet within your business there are some key considerations you should take into account. There is no 'one-size-fits-all' approach. Technology and business objectives are crucial in setting a Web usage policy, however, a failure to factor in the requirements and desires of employees can be counter productive.
The most effective policies are those which manage potential risk liabilities while empowering staff with the ability to use the Internet in a manner that fits closely with their working styles.
Key considerations:
- Involve all concerned parties in the process of establishing your policy.Ask for input from your members of staff to ensure a relevant policy is established for your particular requirements.
- Explain to end users the rationale for your actions. The more they understand why their access is controlled, the less likely they are to waste their time trying to bypass controls.
- Provide a "Plain English" version of your Acceptable Use Policy (AUP). Typically, AUPs are written in legalese and are not widely communicated. End users don't always clearly understand what they are allowed to do, which increases monitoring and auditing costs.
- Don't enforce blanket bans on activities as these are seldom effective. For example, being able to send an IM or a Webmail to a family member when working late can increase productivity and employee morale.
- Unenforceable and unrealistic policies can undermine all policies. Make sure that you are implementing a policy that is practical and sensible within the constraints of your business.
- Make users aware of any monitoring or policy implications and don't assume that users lack technical knowledge. Users need to be aware that their Internet use is being monitored. Making this transparent helps to ensure users understand the purpose of the AUP.
- Be clear and specific on the penalties of breaking policy. Without an understanding of the consequences of violating the AUP, its effectiveness and acceptance are significantly reduced.
ScanSafe's suite of managed Web and IM security services are designed from the ground up to help enforce your acceptable use policies. More information on developing effective Web and IM AUPs can by found in our White Papers section.
