IT departments risk losing responsibility