Analyst Insight: Top leadership involvement in governing IT risk strategies and identifying the right practices to manage those risks is a requirement for any organization looking to have effective supply chain security. Today's IT landscape requires an accelerated level of knowledge sharing of IT risk practices and solutions, both with suppliers and within the enterprise. Leaders have to change how information is communicated and shared throughout the organization. - Andrea Stroud, research program manager, APQC