In information security,two categories of benchmarks are used: standards of due care and due diligence and recommended practices._________________________

Question

Quizplus · Accepted Answer

This is a true statement. Standards of due care and due diligence set a minimum level of compliance that an organization must follow, while recommended practices are suggested actions and measures that an organization can implement to improve its security posture.

In Information Security,two Categories of Benchmarks Are Used: Standards of Due