CRISC Certified in Risk and Information Systems Control – Question069

What type of policy would an organization use to forbid its employees from using organizational e-mail for personal use?

A.
Anti-harassment policy
B. Acceptable use policy
C. Intellectual property policy
D. Privacy policy

Correct Answer: B

Explanation:

Explanation:
An acceptable use policy is a set of rules applied by the owner/manager of a network, website or large computer system that restrict the ways in which the network site or system may be used. Acceptable Use Policies are an integral part of the framework of information security policies.
Incorrect Answers: A, C: These two policies are not related to Information system security.
D: Privacy policy is a statement or a legal document (privacy law) that discloses some or all of the ways a party gathers, uses, discloses and manages a customer or client’s data.