To avoid a fragmented IT environment, clear and effective governance is required, with a defined organisational structure, explicit roles and responsibilities across IT, business, risk and operations, and a disciplined approach to implementation underpinned by continuous monitoring and control mechanisms.