Update audit rules