Information Technology Risk Management and Compliance in Modern Organizations