3.8. Missing, Inadequate, or Incomplete
In policy or planning, can make organizations vulnerable to loss, damage, or disclosure of information assets
With controls, can make an organization more likely to suffer losses when other threats lead to attacks
Principles of