IT RISK MANAGEMENT AND APPLICATION PORTFOLIO MANAGEMENT · Study