A formal agreement between a regulator and organization detailing findings and actions required to remediate​.