An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?

A network security policy governs how the network infrastructure is protected and how users may access network resources, not physical device storage monitoring.

A user password policy defines password complexity, expiration, and reuse rules, and has no bearing on hard disk monitoring.

A backup policy defines procedures and schedules for copying data to prevent loss, which is unrelated to monitoring employee disk contents.

A privacy policy governs what personal and work-related information an organization may collect, monitor, or inspect on employee-owned or company-owned devices, including hard disks. It establishes the expectation of privacy - or lack thereof - that employees have when using organizational resources. Monitoring hard disks is a privacy matter because it involves accessing potentially personal or sensitive stored data.