Review security policies, access controls, and compliance with best practices.