Make up an Acceptable Use Policy. Start with the SANS template. You may also use samples from Appendix C of the textbook. Then write your own AUP (the SANS template does not cover all the material we've covered in class) in your own words.

- Identify what kind of organization it is and any known risks

- Develop a core Use Policy with at least 14 Policy Segments that will have the greatest impact on information security

- Detail at least one provision of each Policy Segment

- Must be targeted to non-technical users

- You can use your existing vulnerability, threat, and risk analysis or start anew.

- Reference a standard, such as NIST.

- Clearly articulate an exception policy