Quantifying the yield of risk-bearing IT-portfolios · Study