SCA computer groups needing different values

I’m looking for best practise in case of need to have different values for security checks/remdiation.
As example, computer group one needs password lenght 12, group two 16.
Looking at SCA, having a second version of the fixlet in the site will cause import errors.
Due to this, it looks like the best way is to create 2 custom sites:
custom site group one
custom site group two.

Is this assumption correct or are the other/better ways to solve this?