Request evidence for audit using two-step process

task brazil Updated Sep 10, 2026 6 min read request-evidence.md
Raw file servicenow.com

Request evidence at any stage during an audit. The details about the items for which evidence is requested are also provided to the person responsible for providing the evidence.

Before you begin

Role required: The role required for Audit Management is sn_audit.user.

Following are the roles required for Lite Audit:

  • sn_grc_advanced.evidence_reader
  • sn_grc_advanced.evidence_requester
  • sn_grc_advanced.evidence_responder
  • sn_grc_advanced.evidence_admin

About this task

Evidence can be requested in the following three ways:

  • By creating an evidence record from the My Evidence module.

  • From the Entity, Control, Audit Task, Control Test Issue, and Other Issues related lists in an engagement record. To request evidence from these sources, navigate to Audit > Engagements > My Engagements. Open the engagement record, and select the related list from which you want to request evidence. From the Action on selected rows list, select Request Evidence. Here, you can either create an evidence request or add more requests to an existing evidence request. The evidence request is created but not the evidence request tasks.

    Select Create an evidence request task in the Request evidence page to create request task.[Omitted image "request_evidence_itam.png"] Alt text: New evidence form.

  • From the following tables: Entity, Control, Control Objective, Control Test, Engagement, Issue. However, when the users request evidence from these tables, the evidence request is created, not the actual evidence request task. The users must go to the evidence request record that is generated and then add evidence request tasks.

In this procedure, the method to request evidence from the My Evidence module is described.

You can request evidence by using two different processes:

  • Three-step process (standard) The standard approach creates an Evidence Collection Details record as an intermediate step. This provides additional organization and context before evidence submission. → Continue with step 1 below.
  • Two-step process (streamlined) Skip the Evidence Collection Details step and move directly to evidence submission. Use this for simpler requests where collection instructions are minimal. → Jump to "Two-step process (simplified)" section below.

Procedure

  1. Navigate to Audit Workspace > Engagement record (in Validate state) > Evidence related list and select New.

    The New button on the Evidence related list is shown in the example.

    [Omitted image "evidence-new-button.png"] Alt text: New button.

    The Request evidence form displays.

    [Omitted image "req-evi-skip-colle-det-selected.png"] Alt text: Skip collection detail.

  2. On the form, fill in the fields.

    To follow the two-step process, check the Skip collection detail check box.

    To follow the three-step process, leave the Skip collection detail check box unchecked.

Field

Description

Number

Unique number of the evidence request.

Requester

User requesting evidence. This field is automatically populated.

Requested on behalf of

User for whom evidence is being requested.

Assignment group

Group assigned to provide evidence.Assigned toUser responsible for providing the evidence.

State

State of the request. The default state is Draft.

Type

The default type is Audit.

Request reason

Reason for requesting evidence.

Watch list

Users interested in viewing the evidence collected. If a person is added on the watch list, they can navigate to Audit > Evidence Request > Watched Evidence Requests to view the requests.

Short description

Brief description of the evidence request.

Description

Detailed description of the evidence request.

Due date

Expected date of evidence submission.

Opened

Date the request is opened. This date is automatically updated.

Closed

Date the request is closed. This date is automatically updated.

Activity

Work notes

Type any notes that might be required..ContextThe table for the context record.

Activities

Activity log for the request.

Confidential

Option to enable confidentiality of the record. Only the assigned confidential users or confidential groups of users can access the record.

Context record

Context record for the evidence request.

Source

Object from where the evidence is initiated.

Skip collection detail

Option to create a two-step evidence request. Select the check box for a two-step process. Deselect for a three-step process. When you select this check box:- The Context and Evidence collection instructions fields are hidden.

  • The Description field appears so that you can enter the evidence details.
  • The Evidence collection details related list is not created.
  • The request moves directly to Work in Progress state instead of Draft state.
  • A New button appears on the Evidence related list so that you can add evidence directly without creating collection details.

Evidence collection instructions

Instructions for evidence collection. Hidden when Skip collection detail check box is selected.

3. Click **Request** in the Request evidence form.
An Evidence request is created as shown in the example.

\[Omitted image "evi-req-record-evi-rel-list.png"\] Alt text: Evidence related list.
  1. Follow these steps to create a response using two-step process (if you selected the Skip collection detail check box in step 2).

    1. Click to open the Evidence request.

      In the Evidence request record, the Details tab shows that the Skip collection detail option is selected. The record is in Work in progress state. The work note shows that "Skip Collection" is enabled.

      [Omitted image "evi-req-record-in-wip-state.png"] Alt text: Evidence request in WIP state.

      A New button displays on the Evidence related list introduced as part of the two-step process as shown in the following example.

      [Omitted image "evi-req-record-evi-rel-list-new-button.png"] Alt text: New button.

    2. Click the New button to open the Evidence form (two-step).

      The Evidence form is shown in the example.

      [Omitted image "creating-response-by-selecting-new-button-in-evidence-rel-list.png"] Alt text: Create a response.

    3. On the form, fill in the fields.

      Field Description
      Name Name of the request.
      Type The default type is Audit.
      Request reason Reason for requesting evidence.
      Due date Expected date of evidence submission.
      Context Context for the evidence.
      Assignment group Group assigned to the request.
      Assigned to User assigned to the request.
      Evidence collection instructions Evidence details and collection instructions (appears only in two-step process).
    4. Click Request.

      A message displays that the response is created.

      The Evidence related list shows the response.

      [Omitted image "evi-response-created.png"] Alt text: Evidence response created.

  2. Follow these steps to create a response using three-step process (if you did not select the Skip collection detail check box in step 2).

    After completing steps 2 and 3 (with Skip collection detail check box unchecked), another Evidence request is created.

    The Details tab of the Evidence request record shows that the record is in the Draft state, the Skip collection detail option is not selected, and the work note shows the activity details. A New button is not displayed on the Evidence related list.

    The Evidence collection details related list appears with a New button. This related list is used to list the items for which evidence is requested.

    [Omitted image "3step-8-evi-req-record-then-skipcoldet-editable.png"] Alt text: Skip collection detail editable.

    Note: If there are no Evidence collection details and the Evidence request record is in Draft state, the Skip collection detail field is editable. The field is not editable when the evidence request record is in the Work in Progress state. You can select the check box and follow the two-step process as outlined in step 4.

    1. Select New in the Evidence collection details related list.

      Field Description
      Evidence request Unique number of the evidence request task.
      Evidence for Record for which evidence is requested.
      Assignment group Group assigned to provide evidence. The users of this group must have the sn_grc.business_user roles.
      Assigned to User responsible for providing evidence.
      Evidence collection instructions Instructions for providing evidence. For example, list of supporting documents, files, and so on.
    2. Select OK.

    3. Select Submit.

    4. Select Request Evidence.

      When an evidence request is in Work in Progress and a new evidence collection detail is added, the evidence request task is sent to the assignee immediately.

      The Evidence related list appears with the list of evidences and the person who is assigned the request receives an email notification to provide the requested evidence. Also, the state of the request changes to Work in Progress.

Search documentation
Search document titles and file paths on the brazil branch