S6 Department - Acceptable Use Policy

This is the Document Release Information
Article Number:	7CAV-S6-002
Scope:	S6 Department – Acceptable Use Policy
Version:	Version 1.1
Effective Date:	06SEP26
Last Modified Date:	06SEP26
Approving Authority:	S6 1IC
Point of Contact:	S6 2IC

Purpose and Scope

This Standard Operating Procedure establishes acceptable-use requirements for systems, services, accounts, information, and administrative access managed by S6.

It applies to all S6 personnel and any member granted administrative, privileged, or non-public access to an S6-managed system.

Authorized Use

Access may be used only for authorized Regimental duties and within the limits of the member's assigned responsibilities.

Members must:

• Use only the access necessary to perform their duties.
• Follow applicable Regimental policies, laws, licenses, and service terms.
• Obtain required approval before making administrative or operational changes.
• Report mistakes, unauthorized access, and suspected security issues promptly.
• Stop using access when it is no longer required or authorized.

Accounts and Credentials

Accounts must be individually assigned whenever the service supports individual accounts. Shared or service accounts may be used only when operationally required and approved by S6 Headquarters.

Members must:

• Protect passwords, authentication codes, recovery codes, access tokens, and private keys.
• Use multi-factor authentication when required by the service and whenever otherwise practical.
• Not share personal accounts or credentials.
• Not include credentials in tickets, private messages, source-code repositories, or general documentation.
• Immediately report suspected account or credential compromise.

Access must be managed in accordance with 7CAV-S6-004 (Access Management Procedures).

Privacy and Confidentiality

Members may access non-public information only when required for an authorized duty.

Non-public information must not be disclosed, copied, retained, or used for personal interest or an unauthorized purpose.

Members must use approved systems and communication methods when handling restricted information and must disclose it only to personnel with an operational need to know.

Prohibited Use

Members must not:

• Access systems, accounts, records, or information without authorization.
• Attempt to bypass security controls or increase their own access.
• Use Regimental systems for personal profit, unlawful activity, harassment, retaliation, or unauthorized monitoring.
• Install, deploy, or connect unauthorized software, scripts, bots, integrations, or devices.
• Alter, conceal, falsify, or delete records without authorization.
• Intentionally disrupt a service or interfere with another member's authorized duties.
• Use access obtained through S6 after the related duty or authorization has ended.

Administrative Accountability

Administrative actions must be performed only within the member's assigned authority.

Actions affecting access, security, availability, shared configurations, or Regimental data must be documented through the applicable ticket, change record, incident record, or other authorized system.

Members must not approve their own access or actions when independent approval is required.

Planned changes must follow 7CAV-S6-006 (Change Management Procedures).

Monitoring and Incident Reporting

Activity on Regimental systems may be logged, monitored, and reviewed for security, accountability, troubleshooting, and policy enforcement.

Suspected compromise, unauthorized access, data exposure, misuse, or other security incidents must be reported in accordance with 7CAV-S6-007 (Incident Reporting and Escalation Procedures).

Members must not exceed their authority, alter potential evidence, or conduct an independent investigation unless directed by S6 Headquarters.

Exceptions

An exception to this SOP requires written approval from the S6 1IC.

The approval must identify:

• The reason for the exception.
• The systems and personnel affected.
• Any required safeguards.
• The expiration or review date.

The S6 1IC may not authorize an exception to a higher Regimental policy or an external legal, licensing, or contractual requirement.

Enforcement and Acknowledgment

Violations may result in corrective action, access restriction or revocation, removal from an S6 billet, or referral through the appropriate Regimental authority.

Access may be suspended immediately when continued access presents a credible security or operational risk, as provided by 7CAV-S6-004 (Access Management Procedures).

Personnel subject to this SOP must acknowledge it during onboarding under 7CAV-S6-003 (Onboarding and Offboarding Procedures). Continued access is conditional upon compliance with this policy.