Every company needs a formal written document which spells out to employees precisely what
they are allowed to use the company’s systems for, what is prohibited, and what will happen to
them if they break the rules. Two printed copies of the policy should be given to every employee
as soon as possible after they join the organization. The employee should be asked to sign one
copy, which should be safely filed by the company. No one should be allowed to use the
company’s computer systems until they have signed the policy in acceptance of its terms. What is
this document called?

A.
Information Audit Policy (IAP)

B.
Information Security Policy (ISP)

C.
Penetration Testing Policy (PTP)

D.
Company Compliance Policy (CCP)