Fake, there’s no way the sysadmin wouldn’t throw the HR rep who signed the policy under the bus (without some CYA documentation prior).

Even if this is a joke, this is a great example of something that happens all the time: people avoiding responsibility by blaming some chunk of software. The electronic equivalent of “No, sir! I didn’t kill that person. The butter knife did it!”