nerdexam
(ISC)2

CGRC · Question #587

Which of the following administrative policy controls requires individuals or organizations to be engaged in good business practices relative to the organization's industry? Response:

The correct answer is D. Due care. Due care is an administrative control that obligates individuals and organizations to exercise reasonable caution and adhere to good business practices relevant to their industry.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following administrative policy controls requires individuals or organizations to be engaged in good business practices relative to the organization's industry? Response:

Options

  • ASegregation of duties
  • BSeparation of duties
  • CNeed to Know
  • DDue care

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    93% (52)

Why each option

Due care is an administrative control that obligates individuals and organizations to exercise reasonable caution and adhere to good business practices relevant to their industry.

ASegregation of duties

Segregation of duties (or separation of duties) is an internal control concept to prevent fraud and error by distributing tasks among different individuals so that no single person has complete control over a process.

BSeparation of duties

Separation of duties is synonymous with segregation of duties, distributing critical tasks among multiple individuals to prevent a single point of failure or malicious activity.

CNeed to Know

Need to Know is a security principle that restricts access to information to only those individuals whose jobs require them to access it, regardless of their clearance level.

DDue careCorrect

Due care refers to the legal and ethical obligation of an individual or organization to apply reasonable prudence and diligence, engaging in good business practices and following established policies and standards within their specific industry or context. This principle ensures that proper actions are taken to protect assets and manage risks effectively.

Concept tested: Definition of due care in security

Source: https://csrc.nist.gov/glossary/term/due-care

Topics

#Due care#Administrative controls#Governance principles#Compliance concepts

Community Discussion

No community discussion yet for this question.

Full CGRC Practice