Strategic deliverable that documents prioritized risks, control measures, roles, and communication logic.