Which of the following is the risk when an IT department restricts itself to solely being an infrastructure provider?