Running an audit and reading the results

Pick the scope and run — read-only, in parallel. The score is for the cover page; the work is in the failures.

• Full catalog or named baseline as the scope
• Parallel execution, 1 to 16 simultaneous controls
• Read-only — no write scope exists anywhere in the app
• Duration scales with tenant size — seconds to a few minutes
• Verdicts: compliant, non-compliant, warning, not assessed
• Weighted score: L1 fundamentals weigh 3× hardening
• Failed controls ship remediation steps and verification PowerShell
• Export always covers the whole audit, never a filtered view