Which of the following is least likely to be part of a privacy audit?

Whether specific controls are implemented and compliance tasks are being followed

Whether policies and procedures for creating, storing, and managing privacy data are applied and followed

Privacy laws that are applicable to the organization

The cost of insurance to offset the risk of data loss due to theft or an accident