The wiping of 150,000 records from the Police National Computer database was likely due to best practice not being followed in three key roles, the professional body for IT has said.