Failure to engage in IT risk identification and impact analysis involving multi-disciplinary functionsControlDevelop a strategic IT plan