CAP · Question #290
Which of the following administrative policy controls requires individuals or organizations to be engaged in good business practices relative to the organization's industry?
The correct answer is D. Due care. Due care requires individuals and organizations to act responsibly and exercise the level of prudence accepted within their industry, making it the control that enforces good business practice standards.
Question
Which of the following administrative policy controls requires individuals or organizations to be engaged in good business practices relative to the organization's industry?
Options
- ASegregation of duties
- BSeparation of duties
- CNeed to Know
- DDue care
How the community answered
(41 responses)- A7% (3)
- B5% (2)
- C2% (1)
- D85% (35)
Why each option
Due care requires individuals and organizations to act responsibly and exercise the level of prudence accepted within their industry, making it the control that enforces good business practice standards.
Segregation of duties is a control that divides critical tasks among multiple individuals to prevent fraud and reduce errors, not a standard of prudent behavior relative to industry norms.
Separation of duties is functionally equivalent to segregation of duties and addresses task division to prevent conflicts of interest, not adherence to industry business standards.
Need to Know is an access control principle that limits information access to only those individuals who require it to perform their specific job function.
Due care is a legal and administrative concept obligating an organization or individual to exercise the level of attention, caution, and prudence that a reasonable person would apply in similar circumstances within their industry. It requires organizations to implement controls and follow business practices consistent with accepted industry standards, directly matching the definition described in the question.
Concept tested: Due care administrative policy control definition
Source: https://csrc.nist.gov/glossary/term/due_care
Topics
Community Discussion
No community discussion yet for this question.