Secure IT Program Evaluation