security-policies/policies/acceptable-use.md

Acceptable Use Policy

Version: 3.0 | Owner: HR / Legal | Classification: Internal

Scope

Applies to all employees, contractors, and third parties with access to Nexus systems.

Permitted use

Company systems are for legitimate business purposes. Limited personal use is acceptable provided it does not:

• Violate any law or regulation
• Compromise system security
• Consume excessive resources

Prohibited activities

• Accessing systems without authorisation
• Installing unlicensed software
• Sharing credentials
• Circumventing security controls (including MFA bypass)
• Storing or transmitting offensive, illegal, or discriminatory content

Monitoring

Nexus reserves the right to monitor all activity on company systems. Users should have no expectation of privacy on company devices or networks.