Auditing Actions of the Key Custodian

You can audit all actions in which the keycustodian_role is active.

The syntax is:
sp_audit "all", "keycustodian_role", "all", "on"
Parent topic: Encrypted Columns Audits