An interesting article from Bill Shinn on implementing audit controls in DevOps in his presentation: The Last Mile for DevOps in Regulated Organizations. His presentation is also available through Youtube.