Microsoft has released two auditing packages for SCCM 2007 so that you can assess your configurations for European and USA data privacy compliance. You can use SCCM 2007’s Desired Configuration Management to query file, security, registry and WMI for configurations of your servers. This can be used to generate configuration compliance reports. You can use these reports to plan remedy actions on your servers.
Credit: Bink.
I’ve also noticed a pack for SQL 2005 SOX compliance and for EU data compliance. Sweet!