EMA White Paper - Securing the Common Point of Failure in IT Risk Controls