Which of the following provides information to employees, such as permitted activities when using the organization's resources?

An Acceptable Use Policy (AUP) is a formal document that an organization uses to define the rules and guidelines that employees must follow when using corporate assets, such as computers, networks, and internet access. Its primary purpose is to outline permitted and prohibited activities to ensure the security, legality, and proper use of the organization's technological resources. This directly matches the description in the question.

B. A Mutual Non-Disclosure Agreement (MNDA) is a legal contract governing the confidentiality of shared information, not general resource use.

C. Digital Rights Management (DRM) is a technology used to control access to copyrighted digital content, not a policy for employees.

D. An End-User License Agreement (EULA) is a legal contract between a software vendor and a user for a specific application.

1. SANS Institute. (2022). Security Policy Templates: Acceptable Use Policy. This resource, often used in academic settings, defines an AUP's purpose as outlining "the acceptable use of computer equipment."

2. National Institute of Standards and Technology (NIST). (2020). SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations. Control family PL-4, "Rules of Behavior," describes the requirement for organizations to establish and make readily available the rules describing responsibilities and expected behavior with regard to information and system usage, which is the function of an AUP.

3. University of Texas at Austin. (n.d.). Information Resources Use and Security Policy. This is an example of a university AUP that explicitly states rules for "permitted activities" for its employees and students.