It's not really related to Linux or the OS at all, just some text in /etc/motd or similar. "Audit" in this case is the more generic term relating to the compan

It's not really related to Linux or the OS at all, just some text in /etc/motd or similar. "Audit" in this case is the more generic term relating to the company responsibilities to audit systems with sensitive data. They are saying the system is not subject to governance type controls for either PCI or Sarbanes-Oxley. Which is ironic given what was leaked out of it. And yeah, that probably means they told cybersecurity auditors this system wasn't subject to rules associated with PCI and/or Sarbox.