Audit committees are uneasy about IT risks these days.

That’s one finding of the most recent report from KPMG’s Audit Committee Institute, and it should surprise nobody. IT risks—emerging technologies, IT projects gone awry, data security—are where audit committee members feel least comfortable with their knowledge of the subject, and with their ability to make recommendations to the CEO or the board. What’s more, audit committees also say they aren’t entirely pleased with the information they get about those risks.