IT is a complex domain which has now found its way into every industry. It is no longer possible to run a business without technology, and the dependencies and risks create new challenges that need to be properly addressed. Complex systems make it difficult for management to identify and quantify the most often underestimated risks present in, and caused by, IT.