Visual architecture mapping: Particularly useful when no diagrams exist. Manual inspection of infrastructure, security and networking: Uncovers any misconfigurations or bottlenecks.