Accompany is concerned about the amount of time employees spend browsing the Internet for personal purposes. Which of the following should be put in place to address the company's concerns?

An acceptable use policy (AUP) is a documented organizational policy that explicitly defines what employees may and may not do on company networks and devices, including personal internet browsing. It sets enforceable expectations, creates accountability, and provides the legal and HR basis for disciplinary action. It is the standard and most appropriate solution for addressing behavioral misuse of company resources.

A stateful firewall can block specific sites or categories but does not define behavioral expectations, create accountability, or provide a governance framework covering all forms of internet misuse.

Video surveillance monitors physical presence in a space but cannot track or restrict what websites employees access on their computers.

Logon time restrictions limit when users can access systems but do not restrict which websites or activities are permitted during authorized working hours.