Ask for proof. See when you were given a promise.
Your auditor asks against named requirements, each saying how it should be answered. An answer weaker than the ask is shown as weaker, and every decision carries a name and a reason.
Five ways to answer
“Answered” is not one thing.
A connected system is proof. A statement in writing is a named person’s word, which is worth having and is not the same. Every item says which one it asked for and which one it got.
When the answer is weaker than the ask, the item says so. Whether it is enough stays the auditor’s decision.
Asking · for the professional
Ask against the requirement, not in an email.
A request is made under an engagement the client has granted. Each item is a requirement’s own wording, and the form shows whether the client’s register already covers it, so most of the list answers itself.
The due date is a window you choose. It is recorded and shown as due; automatic reminders are not sent yet.
Deciding
A rejection says what would satisfy it.
Every answer records who gave it and when, and every decision records who made it, when and why. A rejection without a reason cannot be saved.
An item linked to a statutory section shows how many of this year’s audit tests it feeds, and how many of those are already performed.
Before you start
What teams ask about evidence requests.
Who can send us an evidence request?
A professional working under an engagement you have granted. Without a granted engagement there is nothing to ask under.
Do we have to upload a document for every item?
No. An item can be answered from your register where it is already recorded, from a library document, by a statement in writing or from a connected system.
What if we answer with less than was asked for?
The item says it was asked for one way and answered another, and that the answer is weaker. Whether it is enough is the professional’s decision.
Does Asiri chase us before the due date?
Not yet. The due date is recorded and shown as due, but automatic reminders are not sent.
Does an accepted answer mean we are compliant?
No. Accepting an answer records that the professional found it enough for that item. It does not resolve a finding or approve a control on its own.
Ask for the evidence once, in one place.
Providing evidence does not automatically resolve a finding or approve a control. Your reviewers assess what the material supports.