I am looking for more information or best practices into IT due diligence. Are there any quantitative methods folks use over qualitative? I’ve seen lots of Questionnaires and rating scales without alot of well defined metrics. It always ends up having a score system of 1-3, for example, without any real definition on how to scale. I have also only found one book related to IT Due Diligence in the E-Library (“Reviewing IT Due Diligence” by Christopher Wright and Bryan Altimas). Are there any go-to resources folks have used here or can recommend?