PL-4.1: Social Media and External Site/Application Usage Restrictions

the rules of behavior include restrictions on the use of social media, social networking sites, and external sites/applications;

the rules of behavior include restrictions on posting organizational information on public websites;

the rules of behavior include restrictions on the use of organization-provided identifiers (e.g., email addresses) and authentication secrets (e.g., passwords) for creating accounts on external sites/applications.

Security and privacy planning policy

procedures addressing rules of behavior for system users

rules of behavior

training policy

other relevant documents or records

Organizational personnel with responsibility for establishing, reviewing, and updating rules of behavior

organizational personnel with responsibility for literacy training and awareness and role-based training

organizational personnel who are authorized users of the system and have signed rules of behavior

organizational personnel with information security and privacy responsibilities

Organizational processes for establishing rules of behavior

mechanisms supporting and/or implementing the establishment of rules of behavior