This paper investigates why organizations need an email AUP and highlights how they can enforce it. It also provides practical guidance on developing a policy that meets the combined requirements of an organization’s IT, HR and legal departments.

This paper highlights the pitfalls of simply looking at virus detection rates and investigates the effect of the rapidly developing IT environment and fast-moving threat landscape on assessment criteria.