What do you think is the most important element to consider when setting up a privacy and security operations program? Does anyone have experience with the Privacy certification offered that they can share?