Write an acceptable use policy employees will read
Drafts a plain-language IT acceptable use policy covering devices, accounts, data, AI tools, and monitoring.
The prompt
Draft an acceptable use policy (AUP) for our employees.
Organization type and size: [DETAILS]
Locations and countries: [WHERE employees work - affects monitoring and privacy law]
Devices: [company-issued only / BYOD allowed / mix]
Systems in scope: [email, chat, cloud storage, internet, VPN, AI tools, social media]
Rules we already know we want: [e.g. "no personal cloud storage for work files", "approved AI tools only"]
Monitoring we do: [e.g. "email filtering, web filtering, EDR" - be accurate]
Cover:
1. Purpose and who it applies to (employees, contractors, interns).
2. Accounts and passwords: no sharing, MFA, password manager use.
3. Devices: care, locking screens, lost or stolen device reporting (with a time frame), BYOD rules.
4. Data handling: where work data may be stored, sending sensitive data, removable media.
5. Internet, email, and personal use: what is reasonable.
6. Generative AI tools: approved tools and what data must never be pasted in.
7. Software installation and shadow IT.
8. Monitoring and privacy: what is monitored and why, stated honestly.
9. Reporting security issues: how and where, with no blame for reporting.
10. Consequences and exceptions process.
Style: plain language, short sections, "you" voice, examples of allowed vs. not allowed. Aim for a 10-minute read. Add a one-page summary for employees.
Note: this is general guidance. Have HR and legal review it, especially monitoring sections, which vary by country and state law.
Highlighted [brackets] are blanks to replace with your own details.
Fill in the blanks and use this promptMore Legal & Compliance prompts
What to fill in
- DETAILS
- WHERE employees work - affects monitoring and privacy law
- company-issued only / BYOD allowed / mix
- e.g. "email filtering, web filtering, EDR" - be accurate
How this prompt is built
This prompt follows the Few-Shot structure (Few-shot prompting). A few-shot prompt includes one or more worked examples of the input and the output you want, so the model can copy the pattern instead of guessing it.
Related prompts
- Write a machine-specific lockout/tagout procedureA step-by-step energy control procedure for one machine, listing every energy source, isolation point, and verification step.
- Draft a litigation hold notice employees will actually followWrites a clear preservation notice telling custodians exactly what to keep, where it lives, and what not to do.
- Write a document review protocol for discovery reviewersCreates coding guidelines, issue tags, and privilege rules so a review team codes documents consistently.
- Write a student conduct decision letter that follows due processDrafts a clear, fair discipline decision letter with findings, policy basis, sanction, and appeal rights.