At a minimum an ____ should stipulate: what sensitive data the org will store, how it will process that data whether data will be shared with other organizations

Respuesta :

Photon
organization's posture regarding data would be the answer. 

Hope this helps !

Photon