Defined as having investigated all reasonable measures to address a given risk.

• A. Gap Analysis
• B. Due Diligence
• C. Due Care
• D. Jurisdiction

Answer: (B)

Due diligence is about thoroughly exploring options to reduce risk, weighing benefits, costs, and feasibility, and documenting why a chosen control is reasonable given the situation. This matches the idea of having investigated all reasonable measures to address a risk, since you actively assess multiple mitigation options and justify the decision with evidence and rationale. Gap analysis focuses on identifying missing elements between current and desired states rather than evaluating and selecting controls. Due care refers to the obligation to act with reasonable care to prevent harm, a standard of conduct rather than the process of investigating options. Jurisdiction is simply the authority of a legal area, not about risk mitigation steps. So the best fit is due diligence.