Tag risk assessment IT