結果 : what are the five fundamental components of an it risk management plan