Skip to main content
All CollectionsControl Tests
Test: Acceptable Use Policy
Test: Acceptable Use Policy

Drata inspects your company records to determine if an Acceptable Use Policy is in place and is before the renewal date.

Ashley Hyman avatar
Written by Ashley Hyman
Updated over a week ago

ASSOCIATED DRATA CONTROL

This test is part of the Acceptable Use Policy control that ensures your company has policies and procedures in place to establish acceptable use of information. These assets should be approved by management, posted on the company wiki, and accessible to all employees. All employees must accept the Acceptable Use Policy upon hire.

WHAT TO DO IF A TEST FAILS

If Drata finds that an Acceptable Use policy either does not exist or if the renewal date on the policy has passed, the test will fail.

To remediate a failed test, you will need to either upload or build the Acceptable Use policy within Drata, set a renewal date that aligns with your compliance program goals, and notify the owner to click 'Approve Policy' as soon as possible.

STEPS TO REMEDIATE

  1. Navigate to the Policy Center page

  2. Add an 'Acceptable Use Policy' and ensure that the newly added policy has been approved

  3. Set a policy renewal date that aligns with your compliance program goals. Many frameworks require that policies are reviewed/approved annually

HELPFUL RESOURCES

Did this answer your question?