Custom Security Policy Generator

# [Company Name] - Acceptable Use & Security Policy **Effective Date:** 8/10/2026 ## 1. Purpose The purpose of this policy is to outline the acceptable use of computer equipment, internet access, and data security at [Company Name]. These rules protect both the employee and the company from cyber threats, data breaches, and legal liability. ## 2. Passwords and Authentication * All employees must use strong, unique passwords for every company service. * Passwords must never be written on sticky notes or shared with other employees. * **Multi-Factor Authentication (MFA) is strictly required** for all company email and software applications. ## 3. Device Usage * **Bring Your Own Device (BYOD):** Employees are permitted to use personal smartphones and laptops for work purposes. However, any personal device accessing company data MUST have a passcode/biometric lock enabled and receive automatic software updates. * Devices must be locked (e.g., Windows Key + L) whenever left unattended. ## 4. Network and Internet Security * **Public Wi-Fi:** Employees are **STRICTLY PROHIBITED** from connecting to unsecured public Wi-Fi networks. Please use a cellular hotspot when working remotely. ## 5. Data Storage and Handling * All company documents must be stored in the approved cloud storage system (e.g., Google Drive, OneDrive). Do not store official documents locally on your hard drive, personal Dropbox, or USB thumb drives. * Customer data and personally identifiable information (PII) must never be sent via unencrypted email. ## 6. Incident Reporting If you suspect you have clicked a phishing link, lost a device, or believe your password has been compromised, you must report it immediately to **IT Support**. You will not be punished for reporting an honest mistake. Silence is the only punishable offense.