A company had data for an upcoming project stolen and leaked online. The investigation implies that social engineering is the cause. Which policy can prevent such an incident from occurring?

a. Standard operating procedure (SOP)
b. Clean desk
c. Non-disclosure agreement (NDA)
d. Fair use