Systematic analysis of IT security architecture to identify structural vulnerabilities, misconfigurations, protection gaps, and improvement opportunities. Includes evaluation of network segmentation, access controls, system hardening, infrastructure resilience, and alignment with defense-in-depth and zero trust principles.