check out http://www.dbghost.com for a process to follow that can a long way to satisfy any auditing requirements.