Check out “iSeries Tips and Tools for Securing Your iSeries Version 5” (SC41-5300-06) at
Look at the “Monitor user profile activity” topic on p.85. I think you can do what you want.
See the Security Reference Appendix F for CP (User Profile Changes) audit journal entries. Review entries with the Command Name field value ‘CHG’ and Password Changed value ‘Y’.