An IT governance review involves a systematic assessment of the organization's IT governance framework, activities and processes. An IT governance review is critical to identify gaps, ensure alignment with business goals and objectives, and ensure compliance with applicable regulations such as the NIST Cybersecurity Framework and ISO 38500.