IT strategy for regulated industries