COBIT as a Risk Management Framework