An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?

A backup policy specifies how data is to be backed up and restored, not how it is monitored for content.

A user password policy defines requirements for password strength, rotation, and management, which is unrelated to monitoring disk content.

A privacy policy addresses how an organization collects, uses, stores, and protects personal information, including data stored on company-owned devices that employees use. Monitoring hard disks directly relates to employee privacy and the handling of potentially private data, thus falling under the scope of a privacy policy.

A network security policy outlines rules for securing network access and traffic, not the contents of individual computer hard drives.