Written Information Security Plan (WISP)

IRS Pub 5708 template, designating a security coordinator, risk assessment, and employee training.