Every company needs a formal written document which spells out to employees precisely what they are allowed to use the company’s systems for, what is prohibited, and what will happen to them if they break the rules. Two printed copies of the policy should be given to every employee as soon as possible after they join the organization. The employee should be asked to sign one copy, which should be safely filed by the company. No one should be allowed to use the company’s computer systems until they have signed the policy in acceptance of its terms. What is this document called?
A.
Information Audit Policy (IAP)
B.
Information Security Policy (ISP)
C.
Penetration Testing Policy (PTP)
D.
Company Compliance Policy (CCP)
Why couldn’t CEH just have called it an Acceptable Use Policy (AUP) like 99.999% of the rest of the Industry calls it?
They blow their little niche way out of proportion pretty regularly. 🙂
Besides, ISP is already in common use as Internet Service Provider.