Usage policies must define acceptable uses of the technology. Which option reflects this requirement?

• A. Acceptable uses for the technology are defined
• B. All uses are acceptable
• C. No defined uses
• D. Acceptable uses depend on user's discretion

Answer: (A)

Defining acceptable uses of technology is essential to manage risk and enforce security controls. An Acceptable Use Policy lays out what activities are allowed, what are prohibited, and the responsibilities of users, so everyone knows how the systems should be used and what behaviors are safe and compliant. This clarity helps protect data and supports compliance by preventing risky or unauthorized actions.

The option that says acceptable uses for the technology are defined directly reflects this requirement. It shows there is a formal policy specifying permitted and prohibited uses, which is the foundation of secure and compliant operations.

In contrast, suggesting that all uses are acceptable would remove safeguards; saying there are no defined uses leaves users without guidance; and letting acceptable uses depend on user discretion would result in inconsistent practices and higher risk.