What asset classes are available on your platform? For example FX, FXO, IRS, orders, etc
What devices the system supports? For example, PC, Smart phone, Ipad, tablets, etc
Is there any Credit Cards (PCI) data store in the system?
Does the system deals with money transactions?
Does the system encrypt personal/sensitive data at rest?
What type of data the system deals with?
What information do you hold about the users?
Is there any personal/sensitive data exists in the system?