Inadequate records management (includes retention)

Control

Training and awareness program