If any occurrences of "NOPASSWD" are returned from the command and have not been documented with the Information System Security Officer (ISSO) as an organizationally defined administrative group utilizing MFA, this is a finding.
Fix
Configure the operating system to require users to supply a password for privilege escalation.
Check the configuration of the "/etc/sudoers" file with the following command: $ sudo visudo
Remove any occurrences of "NOPASSWD" tags in the file.
Check the configuration of the /etc/sudoers.d/* files with the following command: $ sudo grep -ir nopasswd /etc/sudoers.d
Remove any occurrences of "NOPASSWD" tags in the file.