Internet & Email Acceptable Use
Stay within corporate internet and email policies.
What Is Internet & Email Acceptable Use?
An acceptable use policy defines what you may do with company email, internet access and devices, and web filtering, endpoint protection and DLP record what crosses the line. You follow a tip to a prohibited site, ignore a download warning and forward a confidential report to personal email, then review what monitoring flagged, file an honest self-report, see the consequences, and turn down a colleague who asks you to break the policy.
What You'll Learn in Internet & Email Acceptable Use
- Recognize prohibited internet activity on the corporate network, such as cryptocurrency platforms, even when the site looks professional
- Explain why software from unvetted sites must not be downloaded, and why an antivirus warning should never be dismissed
- Use approved secure transfer tools instead of forwarding confidential documents to personal email
- File an honest self-report after a policy violation and understand how it affects the outcome
- Decline a colleague's request to use your workstation for a prohibited activity
Internet & Email Acceptable Use — Training Steps
-
Late Night at Northgate Financial
It's 7 PM on a Wednesday — you're working late to finish the Q3 Client Portfolio Analysis, due first thing tomorrow morning. The office is mostly empty.
-
A Helpful Tip
Alice's phone buzzes. It's a message from Jake Torres — a friend and former colleague who now works at a hedge fund.
-
Visiting CryptoPulse
Alice opens CryptoPulse in her work browser. The site looks professional — market charts, analysis tools, portfolio tracking. It doesn't look like a shady crypto site at all. But Northgate's acceptable use policy explicitly prohibits cryptocurrency platforms on company networks, regardless of how professional they appear.
-
The Free Toolkit
A banner on the site offers a 'Free Market Insight Toolkit.' Alice thinks it could help with her analysis. She clicks download without thinking twice.
-
The Download Warning
The company's endpoint protection flags the download. A warning pops up — but Alice is in a rush and dismisses it. 'It's just a false positive,' she thinks. 'Jake uses this tool every day.'
-
The Shortcut Home
It's getting late. Alice decides to email the Q3 report draft to her personal email to finish at home. She sends the confidential Q3_Client_Portfolio_Analysis.xlsx to alice.morgan.personal@gmail.com. 'It's faster than the secure file transfer,' she tells herself. The report contains confidential client portfolio values, investment strategies, and personal financial details.
-
A Productive Evening
Alice finishes the report at home and comes in the next morning feeling accomplished. The Q3 analysis is done, the deadline is met. Everything seems fine.
-
IT Security at Your Desk
Alice arrives at work to find an email from IT Security already waiting. Her stomach drops.
-
The DLP Dashboard
Alice clicks the link in the email and logs in to the Compliance Portal to review the DLP alerts.
-
What the System Caught
The DLP Alert Dashboard reveals three separate violations from last night. Every shortcut Alice took was logged and flagged.
Security Framework Coverage
CIS Controls
- CIS 14.1 Establish and Maintain a Security Awareness Program
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind