We check your systems, settings and policies against the standard you need, then give you a plain-English report with a list of fixes in order of risk.
Fix them yourself or let us do it. Either way, we re-test once the fixes are in, at no extra cost.