Problem
I. Define an AUP as it relates to end users.
II. Research sample AUPs and identify the key elements of your research.
III. Create an AUP for a fictitious credit union:
1. A major focus for the organization is online banking.
2. The organization's most critical business function is its customer service department.
3. The organization wants to be in compliance with the Gramm-Leach-Bliley Act (GLBA) and IT security best practices regarding its employees.
4. The organization wants to monitor and control use of the internet by implementing content filtering.
5. The organization wants to eliminate personal use of organization-owned IT assets and systems.
6. The organization wants to monitor and control use of the e-mail system by implementing e-mail security controls.
7. The organization wants to implement this policy for all the IT assets it owns and to incorporate this policy review into its annual security awareness training.
The policy does not need to be exhaustive, but it should outline the key components of an AUP and provide policy statements that address the above requirements.