Out-of-the-box CISPro does not include all properties in the audit. How can it be determined what properties are audited?