IT assets-control by importance and exception: supporting the "paradigm of change" | IEEE Journals & Magazine | IEEE Xplore