SMS dit: Standardization and risk governance :