Lack of a process for managing facilities to provide a suitable physical surrounding which protects the IT equipment and people against man-made and natural disasters
Control
Implement a suitable environment with adequate physical security and access controls