Information Technology Risk Management in Enterprise Environments. A Review of Industry Practices and a Practical Guide to Risk Management Teams