What term entails investigating the IT security of external companies and the implications of close IT partnerships before implementing interconnectivity?

• A. Auditing
• B. Due diligence
• C. Peer-to-peer security
• D. Vulnerability testing

Answer: (B)

Due diligence is the proactive process of evaluating the IT security posture of external companies and the implications of partnering with them before you interconnect systems. It involves assessing a potential partner’s security controls, data handling practices, regulatory compliance, contract protections, and incident response capabilities so you can decide if connecting networks is acceptable and what safeguards are needed. This is done before interconnection to uncover and mitigate risks upfront, rather than after a connection is made. Auditing tends to focus on evaluating controls within an organization or after the fact; vulnerability testing probes systems for flaws, often of systems you control; the term described aligns best with evaluating third-party risk and partnership implications before connecting networks.