Templates / Attestation Flow

Acceptable use policy template

For all staff using company devices, accounts, email and internet. It sets must and must not rules, such as using only your own account and never forwarding company data to personal email, with a two question quiz and yearly re-attestation.

• App: Attestation Flow for Confluence
• Category: Security
• Edition: Picking the pack works in every edition; the paid settings and the starter text need a paid licence
• Re-acknowledge: every 365 days

Note shown to readers:

By acknowledging, you confirm you will use company systems and data only as this policy allows.

Template. This template is a starting point, not legal advice. Adapt it to your organisation, your contracts and the law that applies to you, and have it reviewed by a qualified professional before you rely on it.

Purpose

This policy explains how you may use [Company] devices, accounts, networks and data, so that we stay secure and meet our obligations.

You must

• Use your own account only, and keep your credentials secret.
• Lock your screen whenever you leave your device.
• Install software only from the approved catalogue or with IT approval.
• Store company data only in approved systems ([list of systems]).

You must not

• Access, download or share illegal, offensive or harassing material.
• Try to bypass security controls, monitoring or licensing.
• Forward company data to personal email or storage.
• Use company systems for a private business.

Personal use

Limited personal use is allowed when it is occasional, does not interfere with your work and complies with this policy.

Monitoring

[Company] may monitor the use of its systems within the limits of applicable law, to keep them secure. [Describe what is monitored and where the privacy notice is.]

Breaches

Breaching this policy may lead to loss of access and disciplinary action. Questions go to [contact].

Includes 2 quiz questions; the answers are not published here. They are shown only in the app's requirement editor, to the person setting up the requirement, who can change them before saving.

1. May you share your account with a colleague who forgot theirs?
   • Yes, if they ask nicely
   • No, accounts are personal
2. Which of these is acceptable on a company laptop?
   • Installing unapproved software
   • Occasional personal browsing that does not affect your work
   • Storing customer data on a personal USB stick

Edit a Confluence page, insert the Attestation Flow macro, open the requirement editor and pick the pack under Start from a policy pack. It fills the note and the due date; with a paid licence it also fills the re-acknowledgement window, the minimum reading time and the quiz, and can add the starter text to the page. Required readers are never preset: you choose them.

• Attestation Flow for Confluence documentation
• Confluence policy templates: all 16 templates