Which of the following is used to define what employees can do on company IT resources?


A. Standard operating procedures
B. IT security manual
C. Service-level agreement
D. Acceptable use policy