1) If any of you are familiar with the Microsoft Assessment and Planning Toolkit tool, can I ask how useful the reports it produces would be to auditors? Does it flag up any specific control weaknesses?
2)What kinds of risks/issues does the tool flag up that would be of interest to management/risk depts/auditors?
3) And in larger domains, any idea how long the tool takes to run? Plus what sort of device should it be run from, in terms of spec?