Inadequate records management (includes retention)

Control

Documented retention schedules and destruction policies and procedures