An example of how the staff training on information security, data protection and privacy (IS/DPP) could look. This part is on the acceptable use of the companies (and sometimes also own) means. Each company should add what is appropriate for it. The slides come with notes that in short explain the visuals on the slides.

1. - Internal -
IS/DPP Baseline Training
E-learning – Part 6 – Acceptable Use

2. 2
- Internal - Page
Purpose Driven
Respect the purpose-bound
nature of Information Assets,
applications, devices, access
rights,…
 Professional use. No private
use. No “private interest”
snooping.
 Need-to-know. Do you really
need it to perform your job?
 Specific purpose: e.g. fraud
prevention is not to be re-
used for marketing.

3. 3
- Internal - Page
The Magic Word

4. 4
- Internal - Page
Write “Nicely”

5. 5
- Internal - Page
Internet
 Do not use internet-based applications
for the manipulation or storage of
confidential data, unless you have an
exception approval of the ISO or DPO.

6. 6
- Internal - Page
Internet
 Do not use internet-based applications
for the manipulation or storage of
confidential data, unless you have an
exception approval of the ISO or DPO.
 Do not visit inappropriate
websites on the internet.
 For private use of the internet,
you should use the computers in
the cafeteria.
 Only download and install
applications from the internet
with the approval of IT.

7. 7
- Internal - Page
Social Media

8. 8
- Internal - Page
Key Takeaways
 Respect the purpose-bound nature of
(information) assets.
 Write nicely.
 Don’t use internet-based applications with
confidential data.
 Be careful on social media.
30 sec IS/DPP survival kit
WrapUp