This role is for someone who can open a configuration file, command output, log extract, scan report or network diagram and understand what it actually shows and who, when they encounter an unfamiliar product, service, or setting, independently researches the vendor documentation to determine what it means for the control being assessed. Analyze how network traffic flows and how common services (e.g., DNS, NTP, directory services, authentication, SSH, TLS, email, logging, load balancing, proxy, VPN) are implemented within the client environment, and identify gaps between documentation and actual implementation.