Audits
Invite an auditor with the correct scope
Invite an external reviewer to the intended engagement and verify assignment, timing, and framework access.
Before you start
Who this is for: Engagement administrators with permission to invite auditors.
- Create and review the engagement's scope and access date.
- Confirm the auditor's email address and the authorized review boundaries.
Follow these steps
Review the engagement first
Open the engagement and inspect its frameworks, control scope, audit period, and Auditor access date. An invitation should follow the agreed scope. Granting a broad ordinary member role is not a substitute for the auditor assignment workflow.
Send the invitation
In the auditor section, enter the auditor's email and choose Invite. Wait for the delivery result. The invitation form reports a seven-day expiry, so ask the recipient to use the current invitation rather than an old forwarded link.
Check acceptance and assignment
Inspect pending and accepted auditors on the engagement. A delivered invitation is not yet an accepted assignment. If the user already has an auditor membership, verify the relevant framework scope with an authorized administrator as well.
Confirm the auditor's entry point
After acceptance, the auditor should use their assigned engagement through Auditor workspace. Available material is constrained by assignment, access window, and framework scope. Ask them to confirm the expected engagement and permitted evidence are visible without broadening access just to hide a scope issue.
What you should see
The invitation is recorded and you can distinguish delivery, acceptance, and access to the scoped engagement.
If something doesn’t look right
The invitation expired
Use the supported invitation process to issue a current invitation and ask the auditor to use it.
The auditor sees no engagement
Check accepted assignment, engagement access timing, active status conditions, and framework scope.
A required record is unavailable
Verify that it belongs to the agreed engagement scope. Expand scope only through an authorized, supported change rather than granting unrestricted membership.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support