The organization should keep a copy of every signed acceptable use policy (AUP) on file, and issue a copy to _______.

a) Employees
b) IT administrators
c) The CEO
d) Third-party auditors