Procedures and processes put in place to minimize risk and ensure compliance with regulations and organizational policies.