In reply to Ja Karman.

Thanks for your comment.

You make a good point, I did not really address the ability to bypass the auditing settings.

To prevent that you would need a combination of approaches including a robust operating system
security model and setup, database security, metadata security and perhaps some other SAS
features such as "lockdown".