Inadequate or lack of a business continuity plan

Control

Documented policies & procedures