$23\mathrm{.}5\%$ complete

Question

A large organization protects sensitive data and prevents unauthorized access. The management is implementing a robust security framework to ensure compliance with industry regulations and safeguard critical assets. As part of this initiative, the IT department is drafting a comprehensive set of guidelines and rules that outline the acceptable use of company resources, including networks, computers, and data. These guidelines will create a secure environment by defining the responsibilities and expected behaviors of all employees regarding information security. What is the IT department creating to define the acceptable use of company resources, outline employee responsibilities, and maintain a secure environment?