Joe, a security analyst, asks each employee of an organization to sign a statement saying that
they understand how their activities may be monitored. Which of the following BEST describes this
statement? (Select TWO).

A.
Acceptable use policy

B.
Risk acceptance policy

C.
Privacy policy

D.
Email policy

E.
Security policy

Explanation:
Privacy policies define what controls are required to implement and maintain the sanctity of data
privacy in the work environment. Privacy policy is a legal document that outlines how data
collected is secured. It should encompass information regarding the information the company
collects, privacy choices you have based on your account, potential information sharing of your
data with other parties, security measures in place, and enforcement.
Acceptable use policies (AUPs) describe how the employees in an organization can use company
systems and resources, both software and hardware.