To get an overview of the current system:
# systemd-analyze security
You must have Systemd version >= 240 for this to work. Check with systemd-analyze --version
. If not... that sucks I guess? I don't know of a way to upgrade without horribly breaking everything.