Which choice below is NOT a common example of exercising due care or
due diligence in security practices?

A.
Implementing employee casual Friday

B.
Implementing security awareness and training programs

C.
Implementing controls on printed documentation

D.
Implementing employee compliance statements

Explanation:
The correct answer is “Implementing employee casual Friday”. The concepts of due care and due
diligence require that an organization engage in good security practices relative
to industry standards.