How to perform a security architecture review at Level 1