Due care and due diligence are in contrast to the "prudent" person" concept

Due care is the continual effort of ensuring that the right thing takes place, and due diligence is the continual effort to stay compliant with regulations

They mean the same thing

Due diligence involves investigating the risks, while due care involves carrying out the necessary steps to mitigate these risks

Due diligence

Rotation of duties

Separation of duties

Controlling input values

They increase the need for other communication security mechanisms

They save money by not needing individual fax devices and the constant use of fax paper

They provide a secure way of faxing instead of having faxed papers sitting in bins waiting to be picked up

Faxes can be routed to employees' email

They require an extra NIC to be installed and configured

They probe systems on a network segment

They listen for ARP requests and ICMP packets

They put the NIC into promiscuous mode

Change management

The review of clipping levels

Archival retention

Resource protection

Limiting the local access of operations personnel

Limiting control of management personnel

Enforcing auditing

Enforcing job rotation