Written Information Security Plan (WISP)

The IRS/Security Summit template, designated security coordinator, risk assessment, and annual testing.