[Qualys Capabilities] Tests file permission and custom Windows registry checks against policy to identify unauthenticated file and share access Identifies and enumerates user group and system accounts and associated privilege levels [CAG Requirements] 
Critical Control 9 Controlled access based on need to know