Glossary: Security Controls and Change Management

Acceptable use policy

Also written: AUP

A written rule that tells staff how they may and may not use company systems, for example that they may not install their own software. It is a managerial control of the directive type.