Which document formally establishes the authority, scope, and responsibilities for an organization's emergency response program?