Any documents on Salesforce security assessment for org

Thanks @Eric for your response, we are planning for a centralized security governance.

Just health check will support to an extent not completely