Which policy focuses on corporate email usage?

• A. Threat Modeling
• B. Fuzzing
• C. Email Security Policy
• D. Risk Management

Answer: (C)

An Email Security Policy defines how corporate email should be used within an organization, including acceptable use, handling of confidential information, encryption requirements, phishing and malware defenses, monitoring, and retention rules. This focus on email-specific rules and controls makes it the best fit for questions about corporate email usage. Threat modeling looks at identifying threats in system design, fuzzing is a testing technique for software vulnerabilities, and risk management is a broad process for identifying and mitigating risks across the organization, not specifically about how email is used.