Governance requires, among other things, effective strategies by the Board of Directors to be carried out by managers and subject matter experts below. But again, perceptions between these entities can be quite different. The language of risk should be a bridge between them all, discuss ideas for using risk concepts and other tools to improve the Board's understanding of IT risks.