A ~2-page information security policy template on the Internet.
Internet-related information risks must be managed in the conventional manner, using appropriate information security controls to mitigate unacceptable risks without unduly limiting the substantial business value of Internet connectivity.
It's a balancing act on a high rope. This policy is your safety net.
Supplied as an MS Word document, readily customised for your organisation's specific situation.