ASSOCIATED DRATA CONTROL
This test is part of the Acceptable Use Policy control that ensures your company has policies and procedures in place to establish acceptable use of information. These assets should be approved by management, posted on the company wiki, and accessible to all employees. All employees must accept the Acceptable Use Policy upon hire.
WHAT TO DO IF A TEST FAILS
If Drata finds that an Acceptable Use policy either does not exist or if the renewal date on the policy has passed, the test will fail.
To remediate a failed test, you will need to either upload or build the Acceptable Use policy within Drata, set a renewal date that aligns with your compliance program goals, and notify the owner to click 'Approve Policy' as soon as possible.
STEPS TO REMEDIATE
Navigate to the Policy Center page
Add an 'Acceptable Use Policy' and ensure that the newly added policy has been approved
Set a policy renewal date that aligns with your compliance program goals. Many frameworks require that policies are reviewed/approved annually
HELPFUL RESOURCES