An organization wants to quickly assess how effectively the IT team hardened new laptops. Which of the
following would be the best solution to perform this assessment?


A. Install a SIEM tool and properly configure it to read the OS configuration files
B. Load current baselines into the existing vulnerability scanner
C. Maintain a risk register with each security control marked as compliant or non-compliant
D. Manually review the secure configuration guide checklists