Security Servers -

Validating that security events (logins, failed attempts) are recorded and alerted. Critical Security Checklist Why it Matters Disable Root SSH

Confirming the OS and applications are on the latest security patches.

Reviews are typically measured against recognized security frameworks to ensure compliance:

Ensuring encryption for data at rest (e.g., S3, EBS) and in transit (TLS/SSL).

Multi-factor authentication stops 99.9% of account takeover attempts.

Verifying users, permissions, and the "Principle of Least Privilege".