Lack of a process for ensuring the achievement of internal control objectives set for IT processesControlPeriodic self assessments and compare to benchmark