IT Change Management Risk and Controls Patches Emerging threats and opportunities Third parties & Compliance End-User computing (EUC) and user-developed applications