Evaluating information technology investment: a methodology for managing risk