A comprehensive document that outlines a business's strategies for identifying, assessing, mitigating, and managing risks.