One of the major lapses identified was ICCL's failure to maintain an up-to-date, accurate inventory of its critical IT assets. Specifically, the centralized inventory was found to be incomplete, lacking details on software assets, and missing crucial information about criticality of these assets.