A North American manufacturer struggled to establish a governance structure that would provide the necessary input to maintain an IT control framework. Its solution was to create a cross-function committee with representation from IT, legal, internal audit, and corporate compliance groups. This allowed the manufacturer to increase the regulatory coverage of its IT control framework and reduce the number of sporadic control updates.