Lack of a process for managing facilities to provide a suitable physical surrounding which protects the IT equipment and people against man-made and natural disasters
Control
Documented IT asset security plan
ACUAACUADocumented IT asset security plan