Is it really possible to audit complex systems in a reasonable amount of time, & would they have to call whenever they make any small changes? I can't wait for

Is it really possible to audit complex systems in a reasonable amount of time, & would they have to call whenever they make any small changes? I can't wait for the day when such systems become plug & play