Acceptable Use Policy (or AUP): something every business should have.
Acceptable Use Policy defines what an employee can and cannot do with company computers, social media accounts and other technologies. I have a template for my clients but this should be reviewed by your business legal counsel to make sure it covers your assets.
It should include things like social media rules (what employees can post on company accounts and on their own accounts about the business), what software and activities are allowed on company devices (what software is authorized, are they allowed to access their own personal social media accounts), are employees responsible for patch updates, how they report security incidents etc.
It should be updated every few years to include new technologies and new employee online behaviours.
