Failure to engage in IT risk identification and impact analysis involving multi-disciplinary functions

Control

Periodically re-evaluate risk assessments