Auditing migrations

Hello all - I also posted this in the Technology SIG group.
Internal audit has asked us to prove that all migrations are being performed with Phire. Is anyone generating some type of reporting to prove no one is introducing unapproved changes? And if so, how are you tracking changes? I would imagine this could be useful/required even if you don't have something like Phire.

I see this involving file tracking for sqr and BIP templates, and looking at tables for any metadata changes. Is there anything in PeopleSoft that can assist with this?

Thank you!