Lack of adequate financial controls related to IT expenditures

Control

Require steering committee approval for all purchases of hardware and software that exceed certain limits