The ISSP should address the fair and responsible use of company computers & networks, including Internet access from the office. Policy should include a prohibition on connecting non-organizational equipment (phones, tablets, laptops, USB drives, etc.) to company computers & networks.

You will choose a reasonable position as to the level of restriction you decided to place on employee use of these technologies. Make sure your approach is consistent across the policy. In other words, don't be extremely permissive in one area of the policy, then extremely restrictive in another.

Can i get an example of how to start this?