Building IT capabilities: learning by doing