Failure to engage in IT risk identification and impact analysis involving multi-disciplinary functions
Control
Include different kinds of IT risks in the enterprise wide risk assessments
ACUAACUAInclude different kinds of IT risks in the enterprise wide risk assessments