Audit Data? EFT/Banking Information in AR

There are multiple UI's in the AR module requied to be used to define and maintain EFT-related data:
- AR09.2 - Banks - updates table DTCUSTBANK
- AR09.6 - EFT - updates table DTCUSTBANK
- AR09.5 - EFT Notification - updates table FTCUSTNOTE
--------------------------------
However - there appears to be no auditing, by the application, of users having added or maintained this sensitive data (confirmed by Lawson Engineers). The only AR auditing appears to involve on CUSTOMER data - of which, this data relates, but.....is not included)
--------------------------------
Was wondering if anyone else has tripped over this issue - and if so - how they might have addressed it? Our internal IT auditors = not impressed. Any feedback and/or advice would be most appreciated - thanks.