-Is there a statement that explains the need for an IT usage policy?

-Does the policy provide a clear set of guiding principles for ethical decision making?

-Is it clear how the policy applies to the following types of workers?

Employees

Part-time workers

Temps

Contractors

-Does the policy address the following issues?

Protection of the data privacy rights of employees, customers, suppliers, and others

Control of access to proprietary company data and information

Use of unauthorized or pirated software

Employee monitoring, including email, wiretapping and eavesdropping on phone conversations, computer monitoring, and surveillance by video

Respect of the intellectual rights of others, including trade secrets, copyrights, patents, and trademarks

Inappropriate use of IT resources, such as Web surfing, blogging, personal emailing, and other use of computers for purposes other than business

The need to protect the security of IT resources through adherence to good security practices, such as not sharing user IDs and passwords, using hard-to-guess passwords, and frequently changing passwords

The use of the computer to intimidate, harass, or insult others through abusive language in emails and by other means

-Are disciplinary actions defined for IT-related abuses?

-Is there a process for communicating the policy to employees?

-Is there a plan to provide effective, ongoing training relative to the policy?

-Has a corporate firewall been implemented?

-Is the corporate firewall maintained and kept up to date?

Those are T or F question