A list of company-approved products should be included in usage policies. Which option is correct?

• A. A list of company-approved products is included
• B. No list is required
• C. Only software products are listed
• D. Only hardware products are listed

Answer: (A)

Including a list of company-approved products in usage policies ensures there is a clear, enforceable baseline for what can be used on company systems. It helps security and governance by confirming that software and hardware have been vetted, are supported, and receive timely patches, while also making accountability straightforward if something goes wrong. With the list, employees and IT can quickly verify whether a product is permitted, and administrators can handle exceptions in a controlled way. Without such a list, policies become ambiguous and harder to enforce, and gaps can arise if only software or only hardware is listed or if nothing is specified at all.