1. A method of complying with computer network security requirements comprising: a. Identifying network security risks by scanning one or more device in a network for network security risks selected from open sockets, open ports, running services, and firewalls settings; b. Refining the set of network security risks to those requiring documentation; c. Creating documentation on the network security risks; and d. Creating a report of the network security risks and documentation, wherein the report identifies ports and services that have not been adequately documented according to the network security requirements.