Design and implement a process to ensure risk management, identity and access management, and information security continuous monitoring internal control documentation is retained to support its system of internal controls and operational needs, as required by GAO’s Standards for Internal Control in the Federal Government Documentation of the Internal Control System.