What is an Acceptable Use Policy (AUP) in PCI DSS context?

• A.A policy listing the cryptographic algorithms, key lengths, and rotation periods that govern all stored account data, backups, and key custodians
• B.A policy defining the acceptable use of technology resources, including workstations, email, internet, and mobile devices, by all personnel
• C.A policy describing the escalation contacts, forensic steps, and card brand notification deadlines that apply to all suspected breaches of the CDE
• D.A policy setting the minimum password length, lockout thresholds, and rotation rules for all user accounts