Lack of a risk management process to identify risks impacting the successful achievement of mission

Control

Establish organizational mission statement and communicate to all employees