During a quarterly review, a risk analyst finds that several audit findings from the previous year remain open. The findings were logged in the issue-tracking system, but no remediation progress has been recorded, and the target dates have all passed without any updates or escalation. Which weakness in the organization's issues and findings management process does this MOST directly indicate?