Change Priority Determination in IT Service Management Based on Risk Exposure · Study