Dear Nagarajan,

You can cover the folowing areas -

- Internet primarily to be used for business purposes, to ensure the band width allowed to conduct business first.

- Company business mail id tobe used for business related communication only, not for personal email exchanges as might get misconstrued.

- accessing obscene url's prohibited.

- also account for cyber crimes viz. Video Voyeurism, Blogging, Phishing, Identity Theft et al not allowed.

Hope this helps in outlining the policy.

Internet Usage

Policy
It is the policy of COMPANY_NAME to provide Internet access to all employees, whenever possible.

General principles:
Company provided Internet/intranet privileges, like computer systems and networks, are company resources intended for business purposes. Use of Internet/intranet is subject to monitoring for security and/or network management and employees may further be subject to limitations on their use of such resources.

Conditions of use:
Users shall not:
· Use the Internet for any illegal purpose.
· Upload, download or otherwise transmit commercial software or any copyrighted materials belonging to parties outside of the company or the company itself.
· Visit Internet sites that contain illegal, obscene, or hateful content which is objectionable and inappropriate for the workplace. Neither shall users send or receive material that is obscene or defamatory or which is intended to annoy, harass or intimidate another person.
· Disable AntiVirus Download Scan. PCs will be configured to automatically scan any material downloaded from an Internet Web site.

E-mail use policy

Policy:
It is the policy of COMPANY_NAME to provide e-mail to all its employees, whenever possible.

General principles:
· Correspondence via e-mail is not guaranteed to be private. Confidential e-mails should not be sent without encryption.
· Use of e-mail may be subject to monitoring for security and/or network management reasons. Users may be subject to limitations on their use of such resources.

Conditions of use:
Users shall not:
· Spend an unreasonable amount of time on personal e-mail.
· Use e-mail for any illegal purpose.
· Send company-wide virus alerts. Please forward information to IT staff to check information. They will make sure necessary precautions are taken.
· Open an e-mail attachment from within Lotus Notes.
· Make or post indecent remarks, proposals or materials.
· Transmit commercial software or any copyrighted materials belonging to parties outside of the company or the company itself.
· Reveal or publicize confidential or proprietary information which includes, but is not limited to: financial information, new business and product ideas, marketing strategies and plans, databases and the information contained therein, customer lists, technical product information, computer/network access codes and business relationships.

Hope this helps :-)

Aside from those mentioned above, you should also state what your policy should cover. These will help you point out what's abusive and what's not. But before that, you might want to check some privacy laws and monitoring rights if you want to monitor your employees.

Some points you need to cover:
-Stating the reasons for the policy
-Describing what constitutes improper use
-Description of proper employee computer use

These are just a few of the many things you need to consider. You can check here for more info about policies on internet usage: <a href="http://www.timedoctor.com/biz3.0/why-you-need-an-internet-computer-usage-policy/">http://www.timedoctor.com/biz3.0/why-you-need-an-internet-computer-usage-policy/</a>