20.12.2.2. Organisation & IT Due Diligence