An established, mandatory business practice that supports IMT projects and existing systems to improve the outcome, diminish risks, and increase reliability. Examples could include business continuity planning processes, threat risk assessment processes, etc.