When creating a separate IT risk register for a large organization, which of the following is MOST important to consider with regard to the existing corporate r...