Lack of order and security in storing documents and updating passwords. There was no consistent system for storing passwords to ensure tight control over sensitive information
The business is well-informed about the health of the IT system and the timeframe for troubleshooting in case of an emergency situation