Inadequate or lack of a business continuity planControlReview results of business continuity plan drills