Wynis: auditing security with CIS BEST Practices