You are an information system auditor of HDA Inc. You are tasked with auditing the security architecture of an online application, aiming to assess its effectiveness and robustness. What is that critical component or aspect that you need to review at the beginning of your audit?