Value comes from embracing and managing risk. An absence of risk generally equates to an absence of value. But value must be measured, and the results, good and bad, must be analyzed for enterprise learning and to enhance future business developments, particularly with regard to developing more robust and complete business cases and promoting better-informed decision making for the future. A more positive and structured approach to enterprise governance of IT will help ensure the delivery of value. This is best achieved by building on what you have.