Auditor questions on AAI changes

Our auditors are questioning the controls we have in place regarding AAI changes. I know that the DMAAIs (F40950) have no audit fields so I don't know of any way to keep track of changes made other than manually documenting changes by taking screenshots before and after. I assume we're not the only company that has auditors that have questioned this so I was hoping someone could advise how they have put controls in place around AAI changes to satisfy auditors. Any advice??