GRC

Due care vs. due diligence

Due diligence is the research you do before acting — like vetting a vendor; due care is the ongoing, reasonable effort to actually maintain protection afterward.

Related terms

GRC Third-party risk management Assessing the security risk vendors and contractors introduce to you. GRC Vendor security questionnaire Standard questions used to assess a vendor's security before signing.
← Back to Governance, risk & compliance