49e3eae4__CAG__Solutions___Qualys__Inc___CAG_Requirements
[Qualys Capabilities] Enables definition of secure configuration policy Evaluates installed IT assets against configuration policy Qualys Policy Compliance supports NIST SP800-53 framework Identifies all deviations from policy, including unauthorized services and ports, patch levels, and vulnerability trends over time Validated for SCAP with FDCC scanning, Authenticated Configuration Scanner, Authenticated Vulnerability and Patch Scanner, Unauthenticated Vulnerability Scanner and Vulnerability Database [CAG Requirements] 
Critical Control 3 Secure configurations for hardware and software on laptops, workstations, and servers
Consensus Audit Guidelines (CAG) Solutions | Qualys, Inc.
CAG Requirements