Rules of Behavior (RoB) are formal guidelines and expectations set by an organization to govern how its employees, contractors, and users should interact with its information systems and resources. They are a foundational element of an organization's information security program, helping to establish a culture of security awareness and compliance among all users of its information systems. Use these RoB guidelines to ensure that all users within your organization understand their responsibilities regarding the ethical and secure use of technology and information assets, thereby protecting your organization's data, systems, and reputation from potential threats and liabilities.