How do you evaluate your software architecture for Security best practices?