Configuration auditing tools provide change detection, configuration assessment, and reconciliation of detected changes against approved requests for changes (RFCs) and mitigation. Configuration settings are assessed against company-specific policies, or industry-recognized security configuration assessment templates used for auditing and security hardening. These tools focus on requirements specific to servers or PCs, but some also address network components, applications, databases and virtual infrastructures.