What a Usable Policy Contains
Short, specific and explained. Every element below exists because its absence causes a real incident we have seen.
- 01Named approved tools, not categories. Staff cannot judge whether a new product counts as a general-purpose assistant
- 02A concrete prohibited list: client data, contracts, payroll, personal data, source code, anything under NDA
- 03The reason for each rule, so staff can apply judgement to situations you did not anticipate
- 04What to do if someone has already pasted something they should not have, without fear of punishment
- 05Who to ask when a new tool appears, and how quickly they will answer