Review documentation of infrastructure
Validate that the implemented solution matches the documentation
Evaluate the design and security controls for potential attacker entry points
Do high availabilty failover solutions exceed the maximum permissible downtime for the service?
Do the security systems provde adequate protection for the value of the assets being secured?