I'm going with option A as the least relevant. Applying security patches is a basic security hygiene practice, and doesn't really reflect the organization's privacy and governance performance.
I disagree with Carlene. The number of privacy rights requests could be a useful metric to assess the effectiveness of the organization's privacy and governance efforts. Option A seems the least relevant to me.
I think option B is the least relevant metric. The number of privacy rights requests is more of a reactive measure, while the organization should be focused on proactive measures to prevent future breaches.
Lilli
2 days agoCory
4 days agoRebecka
4 days agoLilli
6 days agoMelda
8 days agoAvery
9 days agoReiko
9 days agoCarlene
10 days agoMelda
13 days ago