Is it really possible to audit complex systems in a reasonable amount of time, & would they have to call whenever they make any small changes?

I can't wait for the day when such systems become plug & play