What principles should the information security analyst apply in order to develop appropriate acceptable use policies for the client? Make sure you address confidentiality, integrity, and availability of information, as well as each of the following questions:

1-What should users generally be allowed to do with their computing and network resources? When and why would each example be allowable?

2-What should users generally be prohibited from doing with their computing and network resources? When and why would each example require prohibition?

3-When and why should users be aware of acceptable use policies and how can organizations keep track of these policies?