Compliance testing is a method of determining the degree to which information security policies, standards, and control procedures are being adhered to. One example is the use of scanning to detect the presence or absence of mandated patches and updates on virtual and physical machines.