Most organizations are addressing the need for IT governance as an important matter. In a study conducted by Gartner in April 2015, 71 percent of respondents indicated that IT risk management data has influence at the board level. Alarmingly however, only 30 percent of respondents said business units are actively involved in developing security policies that will impact their businesses.