Joe, a newly hired employee, has a corporate workstation that has been compromised due to several
visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such
web sites. Which of the following is the BEST method to deter employees from the improper use of the
company’s information systems?

A.
Acceptable Use Policy

B.
Privacy Policy

C.
Security Policy

D.
Human Resource Policy

Explanation:
Acceptable use policies (AUPs) describe how the employees in an organization can use company systems
and resources, both software and hardware.
Incorrect Answers:
B: Privacy policies define what controls are required to implement and maintain the sanctity of data
privacy in the work environment.
C: Security policies define what controls are required to implement and maintain the security of systems,
users, and networks.
D: Human resources policy does not address issues regarding which website are prohibited.
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, p. 24
http://en.wikipedia.org/wiki/Acceptable_use_policy