In order to understand the differences between a security policy and an acceptable use policy we must understand the how each one is define in our textbook. “Security policy consist of statement ranking information risks, identifying acceptable security goals, and identifying the mechanism for achieving these goals. Acceptable use police, defines the acceptable uses of the firm’s information resources and computing equipment, including desktop and laptop computer, wireless devices, telephones, and the Internet” (Laudon & Laudon, 2016, p. 323). A security policy stablishes rules and behaviors for users and administrators within an organization. It is a living document which continuously updates as technology and employee requirements change.
