The job of an Acceptable Use Policy is to explain what management considers acceptable Internet and computer use and to protect both employees and the organization from the ramifications of illegal actions. How does such a policy address organization needs versus individual rights? Are there considerations beyond the US borders that should be considered?