Audit committees are becoming increasingly interested in IT risk, which is good news for the finance and IT functions