Audit on Contact department??

[cjohnsonuk]

I've noticed that there is no "audit" option on the department field against a contact when viewing the field in entity manager. Most other fields appear to have this option. We've had a user add general notes into this field including personally identifiable information and I'd like to know who. This raised 3 questions
1) how do I review the audit trail of a field that does have the audit box ticked
2) Can the audit option be added for the department field and what other fields are affected this way?
3) is it possible to see who made this entry so that we can target additional training?

Thanks

Chris

Using 5.3.4