This is where Risk IT and Val IT come into play. Risk IT supports cloud IT risk
assessments based on COBIT 4.1 while adding its own guidelines into a governance
process of the same style, depth and direction as current, best-of-breed enterprise
risk management (ERM) business frameworks. Val IT provides a similar process
view, but from the investment perspective. Risk IT and Val IT offer a governance
process at the same level employed by other business programs, but also
encompasses all salient IT issues.