Automated mechanisms exist to govern and report on baseline configurations of the systems.
Does the organization use automated mechanisms to govern and report on baseline configurations of the systems?