auditing a subsystem