What is an acceptable use policy (AUP) and its purpose?

• A. A document outlining allowed and prohibited uses of IT resources to protect assets and compliance
• B. A document listing hardware inventory
• C. A guide for software licensing
• D. A plan for incident response

Answer: (A)

An acceptable use policy defines what users are allowed to do with IT resources and what is restricted, setting clear rules to protect the organization’s assets and ensure regulatory and policy compliance. Its purpose is to establish expectations for behavior, minimize security risks, safeguard networks and data, and provide a basis for enforcing consequences when rules are violated. AUPs typically outline allowed activities, prohibited actions (such as illegal use or exposing systems to risk), user responsibilities like maintaining strong passwords and reporting incidents, and the scope of monitoring and enforcement. It's not about hardware inventories, software licensing, or incident response planning, which address different topics.