The greatest IT risk facing most companies is more prosaic than a catastrophe. It is, simply, overspending.