The failure or misuse of IT has the potential to negatively impact business objectives. The risk resulting from the failure of IT/IS artifacts can be categorized as IT risk, with holistic IT risk representing the overarching composite of all types of IT/IS failures that can prevent an enterprise from realizing one or more business objectives. The likelihood of holistic IT risk having a significant impact on the global business community is growing, with the Internet of Things capable of spreading IT risk far more widely than the Internet has to date. Feature selection for holistic IT risk can be more difficult than feature selection for non-IT business risk, and can vary from one organization to the next. This research explores the use of decision support and fuzzy logic to design a better method for performing holistic IT risk feature selection.