Which of the following is the MOST important course of action to establish an effective process for identifying and managing privacy risk across an organization...