Paul Williams, MBCS, FCA, CITP, is a past international President of ISACA. He is adviser on IT governance activities for Protiviti, the risk management consultancy. He has particular experience in advising financial services companies on IT value, performance, and risk management issues. Previously, he was a partner in one of the largest global professional services firms, where he had responsibility for the development and delivery of technology risk management services. Mr. Williams can be reached at paul.williams at protiviti.co.uk.