Understand the architecture of customer solutions including identifying the security controls in place and how they are used.