I haven't explored it too much yet, but Config Workbook in the AppExchange has a lot of great tools for reviewing profiles and permissions