Andy Bryant is a network analyst at Freewoods Centre for Policy Research. There are approximately $35$ employees currently working on various issues of policy making and research, and this requires access to the network's resources. He has been asked to set a list of dos and don'ts for all the employees to clarify what is acceptable use of company IT resources and what is not. He also needs to explain penalties for violations and describe how these measures protect the network's security. Analyze which of the following security policies Andy should implement in this scenario.

An AUP $($acceptable use policy$)$

An NDA $($non$-$disclosure agreement$)$

An anti$-$malware policy

A PUA $($privileged user agreement$)$