You should care! Due care is the conduct of a person in a particular situation. If due care negligence is tested, each due care juror (auditor/tester) has to determine what is “reasonable” in the given situation. Do train people in good choice vs bad choice.
Continually ensure that threats and vulnerabilities are known and acted upon.
- Assets are identified and protected.
- Controls are in-place.
- Regulations are followed and evaluated.