Hire an independent third-party IT auditing expert and have them work in partnership with your team. Look for Offensive Security Certified Professional (OSCP) or GIAC Certifited Penetration Tester (GPEN) certification and ask which tools and methodologies they use