Case study: Connecting internal audit, risk, and IT to create a complete value chain