Applications. What apps will be allowed or banned? What websites will be blocked? This should include social media, VPNs, remote-access software, etc.
Integration with Acceptable Use Policy. Your work place may not allow social media, objectionable website, or conducting side business. What if an employee is connected through VPN and posts to Facebook, or transmits inappropriate material via personal device over company network? How will you monitor and enforce these policies with respect to personal devices? What rules may you set up?