I would use a tool like HYENA to do that you can list all the security permissions and export them into a msaccess database. That should do the job for your audits. You can download a trail version of hyena from the web which will allow you to see if it suits your needs. There are a good couple of other tools that allow the same thing but that is the first that springs to mind.

edit : added a link to hyenas home site.