My group (BI Dev/decision support) implements very basic auditing into our solutions that only gets reviewed in the event of an issue...so 100% reactionary. The main purpose of our auditing is simply to help us troubleshoot...so you could even say its more of an "event log" rather than "auditing".

Obviously it would be nice to take a proactive approach here, but our group is just too short on time. Heck - even padding time in the project plan for decent documentation is like pulling teeth with mgmt. Communicating the importance of these types of tasks to upper mgmt continues to be a challenge. Any tips?