In the context of enterprise risk management (ERM), what is the overall role of I&T risk management stakeholders?