search for all the files in the entire file system which have either suid or sgid bit enabled and find of diff of these files with the file "files.secure".
find / \( -perm 2000 -o -perm 4000 \) -print | diff - files.secure