CISA Free Vulnerability Scans

I attended the NCUA webinar yesterday about the governement agency Cybersecurity and Infrastructure Security Agency (CISA) who provide free IT audits to government agencies and financial institutions.  I was wondering if anyone has had one done, what was your experience, and how did they interact with the NCUA?  What did they do when they found exceptions?  Did they call the NCUA with their results?

Thanks,

Amy