Inadequate or lack of a business continuity planControlPerform tests of the business continuity plan effectiveness