Agencies need to do more to address risks posed by information technology (IT). Effective internal controls and governance systems help agencies to operate efficiently and effectively and comply with relevant laws, standards and policies. We assessed how well agencies are implementing these systems, and highlighted opportunities for improvement.   1. Overall trends New and repeat findin