An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?

A privacy policy governs what personal and professional data an organization may access, monitor, or store, including hard disk contents on company-owned equipment. It sets employee expectations about whether they have any right to privacy on organizational systems and establishes the legal and procedural basis for monitoring activities.

A backup policy defines procedures and schedules for copying data to ensure recovery from loss, not for monitoring or inspecting employee storage.

A user password policy establishes requirements for password length, complexity, and rotation, and does not address disk monitoring.

A network security policy addresses controls and rules for network infrastructure and traffic, not the inspection of local employee hard disk content.