Case study on several services. No garantee on the accuracy.
When we audit a backend service, what aspects should we look at?