A tool to automate security checklist audits and reports