In my experience with compliance (mostly NIST 800-53) auditors will not just want to see scans, but more importantly an assessment of whether found issues were

In my experience with compliance (mostly NIST 800-53) auditors will not just want to see scans, but more importantly an assessment of whether found issues were applicable and what actions are being taken to mitigate. Maybe I have just been lucky to work with particularly good auditors though.