. . "Today, with ITIL change processes, CobIT controls, Sarbanes-Oxley, and other factors, companies require an enterprise risk management approach that recognizes and mitigates the impact of risk on business services." . . .