ASP Risk and Assurance Framework Policy