Internet use in the course of conducting business is a foregone conclusion. For most industries, lacking access is an encumbrance, at best, to getting things done. However, significant risk accompanies internet access, such as viruses, ransomware and data theft, all of which result from unsafe practices. In other words, infections can occur just from connecting an unsecured system to the network. Likewise, insider threats such as improper access or transfer of data are important considerations when analyzing your security strategy.

From the policy:

PURPOSE
This policy sets forth guidelines for the use of the internet, as well as internet-powered communication services, including email, proprietary group messaging services (e.g., Slack) and social networking services (e.g., Facebook, Twitter) in business contexts. It also covers Internet of Things use and bring-your-own-device practices.

You can customize this policy as needed to fit the requirements of your organization.