All contractual agreements entered between the organization and the employees, contractors, third party users and customers which specify the terms and conditions of their employment or service contract, prior to granting access to data and services which must explicitly include the parties responsibility for information security. Examples inlcude privacy policy, intellectual property agreements, acceptable use, website terms and conditions.