An internet and email policy template covering acceptable use, what is not permitted online, personal email use and monitoring.

Effective Policy Templates

This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

• Policy number and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates developed over 25 years through practical use in the real world.

Further Reading

Further guidance on internet and email security:

• Phishing, Email and Social Engineering
• Malware, Anti-Malware and Patching
• Information Security Awareness and Training
• Information Security knowledge base

Logo Update Service *

Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.

How to Download

To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001, so the toolkit route gives you this file plus everything else you need in one download.

Need Help Implementing?

If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

Internet and Email Policy Template

An internet and email policy template covering acceptable use of the internet on company equipment, or on workers' own equipment during the working day, and the use of email for business and personal purposes.

The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.

What the Internet and Email Policy Covers

• Use of communication facilities - sensible, professional and lawful use
• Monitoring - when business communications may be monitored, kept proportionate and in line with data protection law
• Use of the internet - business use with occasional personal use in the worker's own time, no sharing of login details, and security incidents logged and reported
• Not permitted - offensive or inappropriate content, unauthorised posts about the company or its customers, suppliers or workers, disclosing confidential information, personal social media on company equipment, unauthorised downloads, and removing security software
• Emails - polite, courteous and professional, sent from company accounts
• Personal email use - not interfering with work or server performance, and no harm to the company
• Other business - company facilities not used to run another business without permission
• Recipients' addresses - using Bcc where showing recipients' addresses could breach data protection law

Checked Against Cyber Essentials

The IT policies in the range have been checked against the Cyber Essentials requirements, so their rules on passwords, devices, access and updates do not contradict what a Cyber Essentials assessment asks for.

Using the Policy

Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.

Who Needs an Internet and Email Policy?

Any organisation that gives its workers internet access or email accounts, and organisations working to ISO 27001.

Included in the ISO 27001 Toolkit

This policy is part of the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001.

Works with the Messaging Procedure

The PP-8-05 Internet - Electronic Messaging Policy Procedure covers internet and electronic messaging, and the same policy is included as the Internet / Electronic Messaging Policy section of the PP-8-100 Information Security Policy Procedure.

Document Control

The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.

Related Policies

• P-22 Use of Communications Technology Policy - use of communications technology
• P-40 Acceptable Usage Policy - acceptable use
• P-83 Social Media Policy - social media
• P-38 Software Installation Policy - software installation
• P-35 Information Security Awareness Policy - information security awareness