Question

A privacy officer must present the organization's privacy program status to the board of directors on a quarterly basis. The board has expressed frustration that prior reports were highly technical and did not help them understand whether privacy risk was being managed effectively. Which approach should the privacy officer take to BEST demonstrate the value and effectiveness of the privacy program to the board?

Accepted Answer

Report key privacy risk indicators and program metrics mapped to business objectives and residual risk levels

Answer

Provide a detailed inventory of all data processing activities and the technical controls applied to each system

Answer

Summarize the number of privacy training modules completed by employees during the quarter

Answer

Present the full text of new privacy regulations enacted in jurisdictions where the organization operates