- The organization lacked a data change management process, leading to inconsistencies and errors.
- The team did not define recovery time objectives (RTO) or recovery point objectives (RPO), making data restoration more difficult
- The team did not create an entity relationship (ER) diagram or implement a process for tracking database changes, resulting in a lack of accountability.