CIOs must manage the risk of the status quo