What type of formal document would include the following statement? Employees are responsible for exercising good judgment regarding the reasonableness of personal use. Individual departments are…

A company privacy statement describes how the organization collects, stores, and uses personal data of customers or employees, not how employees are permitted to use company IT systems.

A remote access policy governs the specific rules and security requirements for employees connecting to company networks from outside the office, not general internet usage behavior for all staff.

An Acceptable Use Policy defines the boundaries of permissible personal and professional use of company IT resources including internet, intranet, and extranet systems. It assigns responsibility to individual departments for supplemental guidelines and directs employees to supervisors when uncertainty arises. The specific language around 'reasonableness of personal use' and departmental policy hierarchy is characteristic AUP content.

A non-disclosure agreement is a legal contract binding parties to confidentiality regarding specific proprietary information, not a policy that regulates day-to-day employee behavior on IT systems.