Report the Security Status

So far in this chapter, we have looked at creating and updating baselines, scanning, and patching systems. Naturally, it’s useful both before and after patching cycles to find out the compliance status of the systems within the organization that you are responsible for. Knowing the security status is essential not only for planning patching work, but for providing those reports that management are always looking to get.

Understanding Datacenter Compliance

The VUM set of cmdlets includes Get-Compliance, which allows you to report on host and VM compliance against their attached baselines. You can run this cmdlet against a top-level datacenter object and generate a report for all hosts and VMs and their compliance status against any attached baseline.