Do IT consultants help manage legacy software risks