Which term means actions taken by a vendor to demonstrate or provide due care?

• A. Ethics
• B. Integrity
• C. Due Care
• D. Due Diligence

Answer: (D)

The idea here is about the actions a vendor takes to prove it is meeting an expected level of care. Due diligence is the process of evaluating, verifying, and documenting security and risk controls, then providing evidence of those efforts. This includes things like security questionnaires, third-party audits or certifications, risk assessments, policy reviews, and ongoing monitoring. Through these activities, a vendor demonstrates that it is actively providing due care.

Ethics and integrity describe character and moral behavior, but they are not the procedural steps a vendor uses to show compliance. Due care is the standard of care itself, while due diligence is the concrete process used to confirm and demonstrate that care is being provided.