It's important your business has an email and internet use policy to clearly describe what constitutes acceptable use of your IT systems
The internet and internet technologies have undoubtedly brought a whole host of opportunities and efficiencies to businesses. But, they have also introduced a range of problems and threats that you will need to manage. Implementing IT usage policies can help you minimise some of these risks. For example:
Writing your email and internet use policy may not be an easy task. You need to balance the needs of your network and any legal requirements with the recognition that the internet is a part of your employees' everyday life.
For instance, if you wouldn't stop them making a quick personal phone call on work time, should you stop them sending the odd personal email?
Decide the goals of your email and internet use policy before you start writing it. Your company aims may fall into one of these two groups, or be somewhere in between:
In practice, most companies are somewhere in between these extremes. It's a sliding scale - the further you move towards 'big brother', the more types of website you may block:
Many companies implement more than one policy, to cover different times of day (working hours and lunchtime) or different categories of employee.
Use clear, non-technical language when you write your email and internet use policy. People who are not technically-minded may have a different perspective on what constitutes misuse of your computer systems.
Similarly, they might be unaware of how their activities can cause problems - so put each rule into context.
Keep your internet policy as short as you can, to increase the chance of it being read and understood. And base it on simple principles that can be understood by technical and non-technical staff alike. As a minimum, include the following:
You can base your company's policy on this list or use our free, sample IT policy templates below and adapt them to your specific circumstances.
Remember that things change quickly online. Constantly adapting your policy to take new websites or technology into account would be impossible, so focus on articulating a set of guiding principles.
Finally, be sure to seek professional advice if you're unsure of what to include in your internet and email policy. Getting it right will help your employees and guard your company – so it's something that's worth spending a little money on.
Written with expert input from Craig Sharp of Abussi Ltd.