Documentation and artifacts that demonstrate an organization adherence to regulatory requirements and security standards.