Conducting the due-diligence for the IT department