Similar to CAP's - would it be possible to also do checks on Configuration items that might be set in multiple places. There are some things that can be done in a secure baseline, but might be in Configuration Profile too. If it was able to report on these conflicts it would be beneficial.
