An IT governance framework for IS portfolio management