Reports would be generated based on the tables, no different from an Oracle based stack.
RPG code is fairly easy to understand as well. Any experienced auditor or consultant would be abe to understand the routines easily. Maybe more easily than a Perl or C stack.
I'm no fan of AS/400 for many reasons, but complexity is not one of them.