As information technology increasingly falls within the scope of corporate governance, so management must increasingly focus on the management of risk to the achievement of its business objectives.

Often, an IT group will be chastised because a new technology inserted into the company did not provide the business benefits that were promised.