Managing the risks and monetizing internal IT effectively requires a fundamental shift in mindset from IT as a corporate function toward IT as a service provider.