The architecture audit verifies compliance of security practices relating to the selection, positioning and implementation of hardware and software deployed in an information system, against the state of the art and the audited party's internal requirements and rules. The audit can be extended to interconnections with third-party networks, including the Internet.