// CPCSC TEMPLATES · 06 OF 14

Acceptable use policy

Last verified: 2026-10-05

The rules of behaviour users sign before they touch the enclave. Satisfies 03.15.03 and supports 03.01.20.

Free to use, edit, and share, including by an MSP for a client, under CC BY 4.0. Keep the credit "Hans Study, hans.study" and the licence with it. None of it is legal advice or a substitute for the contract clauses in front of you.

TPL-06 Static template

Enclave systems at [Company] are for contract work only. No personal email, personal browsing, messaging, or personal file sync on enclave workstations. Specified Information stays on enclave systems and the approved transfer tool: never on personal devices, personal cloud accounts, or unencrypted removable media. Photographs of the shop floor, parts, or drawings are not posted anywhere without [role]'s approval. Lost devices and suspected incidents are reported to [incident lead] the same day. Users lock their screen when stepping away and log out when they leave for the day.

I have read and will follow these rules.

Name: ______________________ Signature: ______________________ Date: __________

Signed on hire and annually. Violations are handled under HR policy.

References

  1. Protecting specified information in non-Government of Canada systems and organizations (ITSP.10.171)April 2025, updated October 2025
    Canadian Centre for Cyber Securitycyber.gc.ca
  2. NIST SP 800-171 Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsRevision 3
    NISTcsrc.nist.gov

Outbound links open in a new tab. Source-pinned. If a vendor moves a doc, this block gets updated.