Watch this video on YouTube
What's the most important thing for a company aiming to decrease IT risks?