Lack of a process for managing facilities to provide a suitable physical surrounding which protects the IT equipment and people against man-made and natural disasters