Which term refers to organization-wide rules governing acceptable use of computing resources, security practices, and operational procedures?

• A. Policy
• B. Personnel
• C. POP3
• D. PIN

Answer: (A)

Policy is the formal, organization-wide set of rules that governs how computing resources may be used, what security practices are required, and how operational tasks should be performed. It provides the governance framework for expectations and responsibilities, often encompassing documents like an Acceptable Use Policy, a Security Policy, and an Operations Policy that guide everyday behavior and your incident response. The other terms don’t fit because personnel refers to people, POP3 is an email retrieval protocol, and a PIN is a user credential. In PCI DSS terms, a policy establishes the high-level rules that drive how controls are implemented and ensures consistent security across the entire organization.