CCSP · Question #354
Which of the following aids in the ability to demonstrate due diligence efforts? Response:
The correct answer is C. Security training documentation. Security training documentation directly demonstrates that an organization has taken reasonable steps to educate its employees on security best practices, thus fulfilling a due diligence requirement.
Question
Which of the following aids in the ability to demonstrate due diligence efforts? Response:
Options
- ARedundant power lines
- BHVAC placement
- CSecurity training documentation
- DBollards
How the community answered
(47 responses)- A2% (1)
- B2% (1)
- C89% (42)
- D6% (3)
Why each option
Security training documentation directly demonstrates that an organization has taken reasonable steps to educate its employees on security best practices, thus fulfilling a due diligence requirement.
Redundant power lines are a technical control for availability, demonstrating due care for uptime, but not directly for demonstrating security due diligence.
HVAC placement is an environmental control related to physical security and operational continuity, but does not directly demonstrate due diligence in security education or policy adherence.
Security training documentation provides verifiable proof that an organization has implemented measures to educate its employees about security policies, risks, and best practices. This documented effort shows that the organization has acted with reasonable care to prevent security incidents, which is a key aspect of demonstrating due diligence.
Bollards are physical security measures to protect against vehicle attacks, which demonstrate physical due care but not the broader organizational due diligence in security governance or education.
Concept tested: Due Diligence Documentation
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-50.pdf
Topics
Community Discussion
No community discussion yet for this question.