My parent org is starting to take their vuln scan results and report them to c levels. When they told me I informed them I stopped using their vulnerability sc

My parent org is starting to take their vuln scan results and report them to c levels. When they told me I informed them I stopped using their vulnerability scanner years ago because they would not allow me to chnage anything in it, including exclusions to icmp time stamps or other vulns Ive mitigated while proper fixes were in the works. So I rolled my own and use that to audit my systems. They don’t care because “policy”. My c levels will just ask and then promptly disregard all future reports, adding to the noise