Defined as having taken all reasonable actions to prevent security issues or mitigate a breach.

Defined as having taken all reasonable actions to prevent security issues or mitigate a breach.

• A. Due Diligence
• B. Policies
• C. Due Care
• D. Gap Analysis

Answer: (C)

Due care means acting with reasonable precautions to prevent harm and to mitigate harm if something does occur. In security, this is about putting in place the practical, sensible safeguards a reasonable organization would deploy given the risks, the environment, and available resources. The phrase “taken all reasonable actions to prevent security issues or mitigate a breach” mirrors this standard of care—you’ve implemented appropriate controls and prepared responses so that prevention and mitigation are actually achievable.

Policies are the rules you intend to follow, but they don’t by themselves prove that you’ve taken concrete preventive steps. A gap analysis identifies where controls are missing, rather than implementing them. Due diligence involves the process of researching, assessing, and verifying risks and controls, which is related but focuses more on the investigative and evaluative side than on the actual protective actions you undertake.