Lack of a process for managing the configurations to account for all IT components, prevent unauthorized alternations, verify physical existence, and provide a basis for sound change management
Control
Conduct annual inventory of IT assets, and document system configurations