What A User Wants in a Policy

• Easy to read and understand.
• Short.
• Clear what's against policy.
  
• Lets him do what he wants (Games.  Hog the network.).
• Keeps others from bugging him (Keep the network clear from hogs).
• Privacy!!!
• Right to appeal a SysAdmin's decisions.
• Small punishments.
  

What a SysAdmin Wants in a Policy

• Bans everything he doesn't want his users to do.
• Enforcement is optional.
• Allows for Sysadmin discression.
• Provides legal protection if a user does something wrong on your system.
• Punishments are flexible but can be severe.
• Clear chain of responsibility for each file or web page or email.
  

If it's the Government

• Users have rights including Constitutional rights.
• Public has the right to see documents on the computer. even things you thought were private.
• You are required by law to keep some things private (employment stuff, etc.).
• Web page surveys have weird laws about privacy disclosure and experiments on humans.
  

Some Interesting Computer Use Policies

• Northern's Computer Use Policy http://www.acs.nmu.edu/accntplcy.htm
  
• Northern's Web Page Policy http://www.nmu.edu/message/web.htm
• Tech's Acceptable Use Policy http://www.cec.mtu.edu/cacsec/info/cup_approved.pdf
• A nice clear policy from Colombia U http://www.columbia.edu/acis/policy/
  
• Kentucky's Web Policy http://www.uky.edu/Regs/WebPolicy
  
• A company that will sell you policies http://www.information-security-policies-and-standards.com/infopolicies.htm