The board and IT governance: The what, who and how · Study