nerdexam
(ISC)2

CCSP · Question #354

Which of the following aids in the ability to demonstrate due diligence efforts? Response:

The correct answer is C. Security training documentation. Security training documentation directly demonstrates that an organization has taken reasonable steps to educate its employees on security best practices, thus fulfilling a due diligence requirement.

Submitted by naveen.iyer· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following aids in the ability to demonstrate due diligence efforts? Response:

Options

  • ARedundant power lines
  • BHVAC placement
  • CSecurity training documentation
  • DBollards

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    89% (42)
  • D
    6% (3)

Why each option

Security training documentation directly demonstrates that an organization has taken reasonable steps to educate its employees on security best practices, thus fulfilling a due diligence requirement.

ARedundant power lines

Redundant power lines are a technical control for availability, demonstrating due care for uptime, but not directly for demonstrating security due diligence.

BHVAC placement

HVAC placement is an environmental control related to physical security and operational continuity, but does not directly demonstrate due diligence in security education or policy adherence.

CSecurity training documentationCorrect

Security training documentation provides verifiable proof that an organization has implemented measures to educate its employees about security policies, risks, and best practices. This documented effort shows that the organization has acted with reasonable care to prevent security incidents, which is a key aspect of demonstrating due diligence.

DBollards

Bollards are physical security measures to protect against vehicle attacks, which demonstrate physical due care but not the broader organizational due diligence in security governance or education.

Concept tested: Due Diligence Documentation

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-50.pdf

Topics

#Due diligence#Documentation#Security awareness training#Compliance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice