Match each security policy on the left with the appropriate description on the right. Each security policy may be used once, more than once, or not at all.
Provides a high-level overview of the organization's security program. -- Organizational Security Policy

Defines an employee's rights to use company property. -- Acceptable Use Policy

Identifies the requirements for credentials used to authenticate to company-owned systems. -- Password Policy

Identifies a set of rules or standards that define personal behaviors. -- Code of Ethics

Sets expectations for user privacy when using company resources. -- Acceptable Use Policy

Specifies that user accounts should be locked after certain number of failed logins attempts. -- Password Policy