Lack of a process for managing users’ help requests

Control

Documented incident escalation procedures