⚡ Direct Answer Summary (AI Overview / Key Takeaway)
Permitted and prohibited uses across all eTrepid digital platforms, managed enclaves, and client-facing infrastructure.
eTrepid Acceptable Use Policy (AUP)
Governing Standard: NIST SP 800-171 AC.2.016 / ISO 27001 / Applicable Federal Law
1. Purpose and Scope
This Acceptable Use Policy (AUP) governs the access and utilization of all information technology resources, digital networks, public websites, client portals, APIs, and managed computing services provided by eTrepid Inc., including the ThreatKrusher Cyber Defense System.
This policy applies to all authorized users, including clients, client employees, partners, contractors, and public website visitors accessing eTrepid digital infrastructure.
2. General Principles
eTrepid IT resources are provided to deliver high-assurance cybersecurity operations, managed services, compliance documentation, and authorized communication. Users must:
Comply with all applicable federal, state, and local laws, including export control regulations (ITAR/EAR) and Defense Federal Acquisition Regulation Supplement (DFARS) rules.
Maintain the confidentiality of access credentials, authentication tokens, and cryptographic keys.
Respect system security perimeters and refrain from circumventing access controls.
3. Prohibited Activities
The following activities are strictly prohibited across all eTrepid systems and managed environments:
3.1 Security and Integrity Violations
Unauthorized Access: Accessing or attempting to access accounts, data, servers, or networks without explicit administrative authorization.
Perimeter Scanning & Probing: Conducting unauthorized port scans, vulnerability scans, penetration tests, or security assessments against eTrepid infrastructure or client networks without prior written consent (refer to the Coordinated Vulnerability Disclosure Policy for authorized research).
Denial of Service: Launching, executing, or facilitating any Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks against eTrepid systems or external networks.
Malware Propagation: Introducing, hosting, or disseminating malicious software, ransomware, trojans, worms, or spyware.
3.2 Network and Operational Abuse
Spam & Phishing: Transmitting unsolicited commercial communications, chain letters, or fraudulent phishing schemes.
Cryptocurrency Mining: Utilizing eTrepid computing power, cloud resources, or client enclaves for unapproved cryptocurrency mining.
Interference with Monitoring: Disabling, tampering with, or obstructing ThreatKrusher telemetry agents, log collectors, or SOC monitoring sensors.
3.3 Intellectual Property & Content Violations
Infringement: Storing, distributing, or transmitting content that violates patents, copyrights, trademarks, or trade secrets.
Controlled Data Misuse: Transmitting unencrypted Controlled Unclassified Information (CUI) or export-controlled defense technical data outside of approved sovereign enclaves (e.g., Azure Government / AWS GovCloud).
4. System Monitoring and Privacy Expectation
Authorized users accessing eTrepid client portals, managed systems, and corporate networks have no expectation of privacy regarding system usage.
To maintain security, regulatory compliance (NIST SP 800-171 3.3 Audit & Accountability), and threat detection, eTrepid actively monitors, logs, and analyzes:
Network traffic, connection timestamps, and originating IP addresses.
User authentication events, session durations, and privilege escalations.
System commands, API calls, and file integrity modifications.
Logs and operational telemetry may be provided to law enforcement or federal contracting authorities in accordance with legal and regulatory mandates.
5. Enforcement and Violations
Failure to adhere to this Acceptable Use Policy may result in disciplinary and corrective actions, including:
Immediate suspension or permanent termination of system access credentials.
Revocation of service agreements in accordance with commercial terms.
Reporting of illegal conduct to federal law enforcement authorities, including the Defense Criminal Investigative Service (DCIS) and Federal Bureau of Investigation (FBI).
