I have clients that customize benchmarks for internal use (they use combinations of CIS, PCI and NIST). Having one assessment that covers all the options without false positives would be a great to share with clients. Nessus has an audit language for their testing, maybe something similar?