Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.