Do IT consultations include digital risk assessments