EMA has long viewed the management of a wide range of IT risks as a function of a holistic approach to IT management. But is there a relationship between positive outcomes in managing a broad spectrum of IT risks -- not just in security or compliance, but in IT’s broader performance in serving the business -- and an organization’s maturity in multiple aspects of IT management?

This recap of a 2008 EMA survey summarizes findings that suggest a number of important answers to that question. Five aspects of high-performing organizations observed in this survey deserve particular attention among organizations seeking to solidify the foundations of a more effective strategy -- particularly in light of the recent increase in targeted attacks that make organizations more vulnerable to mistaken assumptions about their security posture than ever before. The note concludes with a consideration of where IT has come in the time since this study, and examples of where EMA would look today for the hallmarks of high performers in light of trends since.