What is the minimum and customary practice of responsible protection of assets that affects a
community or societal norm?

A.
Due diligence

B.
Risk mitigation

C.
Asset protection

D.
Due care

Explanation:
“Due care and due diligence are terms that are used throughout this book. Due
diligence is the act of investigating and understanding the risks the company faces. A company
practices due care by developing security policies, procedures, and standards. Due care shows
that a company has taken responsibility for the activities that take place within the corporation and
has taken the necessary steps to help protect the company, its resources, and employees from
possible risks. So due diligence is understanding the current threats and risks and due care is
implementing countermeasures to provide protection from those threats. If a company does not
practice due care and due diligence pertaining to the security of its assets, it can be legally
charged with negligence and held accountable for any ramifications of that negligence.” Pg. 85
Shon Harris: All-in-One CISSP Certification
“The following list describes some of the actions required to show that due care is being properly
practiced in a corporation:
Pg. 616 Shon Harris: All-in-One CISSP Certification