This is actually an idea I had started working on, but specifically for PCI requirement 6.2 in conjunction with some kind of automated threat analysis.
If I can list every software used in the card processing environment and get automated alerts fired straight into my ticketing system to create an event, this would be good.