Which security policy establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations (and to avoid possible litigation)?
A)AUP
B)E-mail policy
C)Due diligence
D)Separation of duties

Question

Quizplus · Accepted Answer

Due diligence is the security policy that establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations and to avoid possible litigation. It is a legal concept that refers to the care that an organization must take to avoid harm to its stakeholders. This includes taking reasonable steps to protect sensitive information, financial data, and customer information from unauthorized access, use, or theft. AUP and e-mail policy are more specific policies that deal with acceptable use of technology resources and email communication, respectively. Separation of duties is a control that ensures that no one person can independently perform a critical task. While it can help with security, it is not a policy that specifically addresses an organization's need to take reasonable precautions to demonstrate responsibility.

Which Security Policy Establishes an Organization's Need to Take Reasonable