What are the legal requirements that an organization adopt a standard based on what a prudent organization should do,and then maintain that standard?
A) Certification and accreditation
B) Best practices
C) Due care and due diligence
D) Baselining and benchmarking

Question

Quizplus · Accepted Answer

The legal requirements for organizations to adopt and maintain a standard based on what a prudent organization should do are due care and due diligence. Due care refers to the actions that a prudent organization would take to safeguard its assets, while due diligence refers to the ongoing monitoring and maintenance of those safeguards. Certification and accreditation, best practices, and baselining and benchmarking are all related to the process of implementing and measuring the effectiveness of a standard, but they do not necessarily constitute legal requirements.

What Are the Legal Requirements That an Organization Adopt a Standard