Does your company have a centralized security assessor tool you use during or right before performing a security assessment of an application to check if the mandatory controls are implemented?

For example the CIS CAT PRO 4 Security Assessor Tool can scan a system configuration against an industry benchmark in 1-3 minutes. So when you’re reviewing control implementation you can check system level controls and have an actual report in front of you prior to getting on the call. This way if the team says they have TLS 1.2 implemented you can tell them to go back and verify because it shows TLS 1.1 on the report. Or a password …

application assessment benchmark call cat check cis configuration control controls cybersecurity industry performing pro report scan security security assessment system tool