If a system complies with these requirements, it is auditable. I see only one exception to this, but that is a theoretical one only: if a whole business was automated, so that the manager (all on his own) could operate and control the whole thing by pushing buttons, perhaps then an audit would not be feasible. By the time things like this come within feasible range, however, we shall probably invent new means to carry out an audit!