Information compliance is a risk based activity. Your maturity will vary with your starting point and desired end point...
The response will be need to be an increase in maturity only proportionate to the risk faced...
Management consulting, specialising in Privacy Compliance, GDPR and providing value