Inadequate records management (includes retention)ControlDocumented retention schedules and destruction policies and procedures