Improvements to audit records

## Security Story

### Story context

- [ ] AU-3(1) Content of audit records
- [ ] AU-6(1) Audit review, analysis, and reporting
- [ ] AU-7 Audit reduction and report generation
- [ ] AU-12 Audit generation

### Mitigation strategies

- Consider whether to include session, connection, and transaction/activity duration
- Consider whether to implement automated mechanisms to integrate audit review, analysis, reporting processes
- Consider what might be needed to support organizational processes, investigations and response to suspicious activity
- Consider implementing controls for audit reduction and report generation
- Consider implementing how organization-defined personnel or roles select which auditable events are to be audited