Lack of a process for obtaining independent assurance to increase confidence and trust among its customers and third-party providersControlPeriodic independent IT audits