Skip to content

Due Care

What is Due Care?

The level of care that a reasonable person would exercise in protecting organizational information assets and complying with security requirements.

Governance

What the standards actually require on due care

Requirements naming due care across 6 standards, quoted from the control text.

In carrying out its functions and powers an owners corporation must act honestly and in good faith and exercise due care and diligence.

victoria-owners-corporations-act-2006::5 · Act honestly, in good faith and with due care and diligence →

A business supplying services to a consumer in trade or commerce guarantees that it will render them with due care and skill. The services guarantees do not apply to insurance contracts or to business-purpose transport and storage of goods (s 63).

australian-consumer-law-competition-and-consumer-act-2010-schedule-2::s60 · s 60 Render services with due care and skill →

When making a product available, distributors must act with due care in relation to the Regulation's requirements.

eu-cyber-resilience-act::Art. 20(1) · Distributors act with due care →

If an appropriately cleared technician is not used to undertake maintenance or repairs of IT equipment, the technician is escorted by someone who: - is appropriately cleared and briefed - takes due care to ensure that data is not disclosed - takes all responsi...

ISM-0306 · Escorting uncleared technicians →

Throughout the defined support period, manufacturers monitor for, identify and fix security vulnerabilities in the consumer IoT products they sell, produce or have produced and in the associated services they run, exercising due care over all software and hard...

etsi-en-303-645::Provision 5.2-3 · Continuous monitoring and remediation across the support period →

When making a battery available on the market distributors shall act with due care in relation to the Regulation's requirements, and before doing so verify that the producer is registered in the Article 55 register of producers, that the battery bears the CE m...

eu-batteries-regulation-regulation-eu-2023-1542::Art 42 · Obligations of distributors →

Questions people ask about due care

What is Due Care?
The level of care that a reasonable person would exercise in protecting organizational information assets and complying with security requirements.
Why is Due Care important for compliance?
Due Care is a key concept in Governance. Understanding due care helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Due Care?
Due Care appears in the requirement text of Victoria Owners Corporations Act 2006, Australian Consumer Law (Competition and Consumer Act 2010 Schedule 2), EU Cyber Resilience Act, Australian Information Security Manual, ETSI EN 303 645. Across these standards we have identified 10 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Due Care?
Explore our compliance framework pages to see how due care applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Due Care applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.