System and method for automating security configuration standards assessments and mitigations – 11252178