Configuration is checked continuously against CIS, ISO 27001, and Microsoft baselines. Each finding comes with remediation steps, and a configuration baseline tracks drift so changes can be reviewed or restored.