The security architect needs to draft knowledge of the organization's infrastructure to learn who has access to where weak points can occur.