CREATE your own list of TASKS that you think need to get done, to go from "we don't do this at all" to "we've got a good, working system for identity management and access control in place for BOTH companies combined together as one organization