Provides IT professionals with an integrated plan to establish and implement a corporate risk assessment and management program.