George,
You get your noble steed and shield ready, and I'll pretend to be a dragon, ok? (I'm slipping into slayerishness here, so be sure your sword is sharp and your lance, is well, er, umm, ready, yes, that's it, ready.
I intend that all users will log on via one account, which will only have permissions to execute sp's. Those sp's will move the db from one valid business state to another, thereby completing a business process.
Since direct access to tables will be unavailable, only legitimate activities can be carried out. Assuming the designer had the wit to isolate different functions, a beneficial side-effect, is that the dba knows that any and all code which affects a particular table is in one place, and one place only.
If you forget to add the auditing code to your new sp, then that's called sloppy programming, and in any event, must surely fail unit test. Since audit was designed in from the start, correct audit entries will be part of all unit tests, right?
W.R.T scattered audit, I would implement procedures to provide audit of a table, based on passing in say table name, and the pk of the affected rows(s). All the audit sp's would be named to show their purpose, and be similar in nature. The business processes would obtain audit by invoking these procedures, not by having tons of code in each sp. However, this is very poor as it is merely data audit - see below.
Putting a trigger on each table to modify an audit table, gives nothing more than a data audit. Most companies are interested in business audit. They want to know who did what, when, and involving how much money. I first got into db's when I wrote an Access database to reverse engineer an oracle trigger-based data audit into meaningful business transactions. It soon became apparent that only two or three people in the company has sufficient knowledge to follow a sequence of updates, inserts and delete audits through a dozen tables, and mentally convert them into something useful. I'd be happy to be wrong, but I don't see how a trigger on a table can do anything other than provide data audit.
Regards
T