Many nonmanufacturing companies have substantial amounts of capital equipment, which is often not physically or logically controlled in a timely manner.
• Lack of information systems access and security controls
• Insufficient control over information technology back-up, recovery and firewall protections
• Inadequate controls and procedures in place to effectively identify and monitor
amendments to software license arrangements.