Inadequate or lack of a business continuity planControlPeriodically evaluate and update continuity plan