The primary role of IT governance in the context of an outsourcing arrangement for IT services is to ensure that the risks associated with outsourcing have been mitigated. Effective IT governance aims to align IT strategies with business objectives, manage performance, and ensure that risks are adequately addressed to protect the organization. Ensuring stakeholder input, vendor due diligence, and including a right-to-audit clause are important aspects of the outsourcing process, but the overarching priority must be the mitigation of associated risks to maintain operational stability and security.