What should not be part of an acceptable use policy ?

A. Allowable use of systems
B. Legal obligations
C. Encryption policies
D. User responsibilities