Tag Risk mitigation in IT systems