However, I would rather wait for a considered set of guidelines that work than accept a knee-jerk reaction. In the interim, network managers have a responsibility to safeguard networks from viruses and to keep management informed about risks arising from staff using the internet. AUPs give staff a wider understanding of the company's level of security, and why it is important. Security consultants have for years been telling companies to do this. Security policies differ from security measures, such as firewalls, in that they take a holistic approach to each organisation.
Different businesses access the internet for various different reasons.
Richard Gray, partnership secretary at law firm Park Nelson, was one of the first to assess the guidelines. It's about giving practical advice. What you want is two sides of paper that says 'This is what you can use the internet for, and this is what you can't'. He canvassed opinions from staff and partners to avoid an atmosphere of distrust. I want to make net access more widely available in the firm, because it's a valuable business tool in terms of research.