Evidence request is used by audit and compliance teams for requesting supporting documents during an audit. Auditors and compliance teams require these documents from the first line of defense.

Evidence is all the information used by an auditor in determining the audit opinion. Evidence includes the information contained in the accounting records underlying the financial statements and other information. Evidence is cumulative in nature. It includes evidence obtained from audit procedures performed during the audit. Evidence may also include audit evidence obtained from other sources such as, previous audits.

An evidence request is frequently introduced during the audit preparation or the planning phase after the audit announcement. The documents requested are used by the audit team to understand the in-scope controls and processes, and to begin fieldwork testing. As an audit progresses through various stages, the audit team frequently adds new requests to the list. The compliance teams use the collected evidence for control testing. Starting with the latest release, unplanned evidence request is supported by Audit Management and Policy and Compliance Management. The following are the benefits of the evidence request feature:
  • Helps the second line and third line of defense to create and send all their evidence requests quickly.
  • Helps in the management of requests and evidence.
  • Eliminates multiple emails by providing a tool for communication.
  • Compliance teams can request evidence from control owners, business stakeholders, and process owners.
  • Audit teams can request evidence from control owners, business stakeholders, process owners, and compliance teams.
  • Enables providing the due date for the evidence to be submitted.
  • Provides the ability to send email reminders to the assignee.
  • The assignee can provide evidence directly from the Service Portal.
  • Simplified manager approval of evidence requests can be based on various criteria, such as confidentiality and criticality.
  • The assignee can store evidence in a common evidence folder, such as Box or SharePoint.
  • Improved communication channels between requesters and assignees streamline the approval process.
  • Improved confidentiality constraints prevent unauthorized persons from viewing request information.

Evidence can be requested from an engagement and all audit tables. To understand how to request evidence, refer to Request evidence for audit.