We’re trying to use the CIS Critical Security Controls as an audit process. We go over some ideas we’ve come up with. It will take us time to refine the process. We also go over some of the tools we might use. Tools like Nessues for vulnerability scanning. We also talk about ITSM solutions for managing everything.