What is the minimum and customary practice of responsible protection of assets that affects a
community or societal norm?

A.
Due diligence

B.
Risk mitigation

C.
Asset protection

D.
Due care

Explanation:
“Due care and due diligence are terms that are used throughout this book. Due diligence is the act of
investigating and understanding the risks the company faces. A company practices due care by
developing security policies, procedures, and standards. Due care shows that a company has taken
responsibility for the activities that take place within the corporation and has taken the necessary
steps to help protect the company, its resources, and employees from possible risks. So due
diligence is understanding the current threats and risks and due care is implementing
countermeasures to provide protection from those threats. If a company does not practice due care
and due diligence pertaining to the security of its assets, it can be legally charged with negligence
and held accountable for any ramifications of that negligence.” Pg. 85 Shon Harris: All-in-One CISSP
Certification “The following list describes some of the actions required to show that due care is being
properly practiced in a corporation: Pg. 616 Shon Harris: All-in-One CISSP Certification