Failure to engage in IT risk identification and impact analysis involving multi-disciplinary functions
Control
High level management group that includes multi-disciplinary functions performs risk assessments
ACUAACUAHigh level management group that includes multi-disciplinary functions performs risk assessments