Which of the following is MOST critical for sustaining a newly implemented IT governance program?