Which choice below is NOT a common example of exercising due care or due diligence in security
practices?

A.
Implementing employee casual Friday

B.
Implementing security awareness and training programs

C.
Implementing controls on printed documentation

D.
Implementing employee compliance statements

Explanation:
The correct answer is “Implementing employee casual Friday”. The concepts of due care and due
diligence require that an organization engage in good security practices relative to industry
standards.