Due care is the process in which sufficient security and IT measures are present. Due diligence identifies the measures used by an organization to avoid threats related to cybersecurity.