CompTIA Security+ Exam Prep

Answer: C - When a company has done everything possible to prevent security risks and to check if a security breach has taken place, they are practicing due care and due diligence. Due care means that the company did all it could have responsibly done under the circumstances to prevent security breaches and also took reasonable steps to ensure that if a security breach did take place, proper controls or countermeasures were in place to mitigate the damages. Due diligence means that the company properly investigated all of its possible weaknesses and vulnerabilities.