Watch this video on YouTube
The BEST way for an organization to ensure that servers are compliant to security policy is to review: