Negligence uses a reasonable person standard in cybersecurity measures, showing necessary due care when working with PII. This is also known as:

Domain 1: Security and Risk Management Practice Questions
Questions from the following topics are included in this domain:
Basics of security and risk management
    Differing data roles and responsibilities
    Identifying administrative, physical, and technical controls
    Ethics of security professionals
    Administrative policies, procedures, and guidelines
    Object categorization and classification
    Importance of security training