An order, a document granting rights?

Question

Documentation

Hello everyone, I work as a part-time sysadmin as an information security specialist (just started), the management asked me to create orders (document) on individual responsibility for opening USB ports and granting local admin rights (has a domain). The document is needed for us to protect against the installation of third-party programs, etc., as well as in the event of information leakage and virus infection via USB. Does anyone have an example of such a document? I will be very grateful.

Answer 1

Immediately the question is - what kind of responsibility does the leadership want to impute? Material? yes, they will drag him through the courts, because financial responsibility is such a #oops. Responsibility for comm.secret? Do you know what character is used to spell the word "for you fuck"? Find out. For the competent introduction of the regime of comm.secrets, you need to do so much that you will swell.
Most likely, you will end up with a completely bespontovy piece of paper, over which a more or less literate person will only laugh.