Since the passage of the Sarbanes-Oxley Act, IS professionals are facing even greater challenges to meet raised expectations to provide accurate, visible, and timely information while ensuring their company's information assets are secure. This article presents an IT governance framework for responding to these challenges.