Inadequate control over keys

Control

Documented policies & procedures