there has to be an evaluation of strategic approaches – greater emphasis needs to be placed on governance risk and compliance