A01 chaf6542 06 se fm indd

 acceptable-  use  policy

’. This will 

describe the types of material it is not acceptable to access and is also a means of explaining 

monitoring procedures.

Scanning and filtering are the two most common forms of monitoring. 

Scanning 

 software

 identifies the content of emails sent or received and web pages accessed. Tools 

such as WebSense or MailMarshal SMTP from Marshal or Web Marshal will look for the 

occurrence of particular words or images – pornography is indicated by skin colour tones for 

 Acceptable-  use 

policy

Statement of employee 

activities involving 

use of networked 

computers that are not 

considered acceptable by 

management.

Figure 11.27

Staff misuse of IS

Source: BERR (2013).

5

56%

12 9 8 8 2

10

52%

13 9 7 7 2

10

55%

8 8 12 6 1

25%

52%

4

8

5 51

27%

54%

11 4

2

11

29%

58%

7

2

21

1

One only

Loss or leakage of confidential

information

Misuse of confidential information

Breach of data protection

laws of regulations

Misuse of web access

Misuse of email access

Unauthorised access to systems or

data (e.g. using someone else’s ID)

A few

Roughly one a month

Roughly one a week

Roughly one a day

Several a day

Hundreds a day

20

0

40

60

80

100