A cross-functional body that sets enterprise cryptography policy, risk appetite, and migration priorities.