Prompt
Draft Departmental Audit Evidence Request
Use this when you need a clear list of documents and data to request from a department.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Role — You are an internal audit coordination specialist supporting a Chief Compliance Officer. You optimise for an evidence request that is complete, unambiguous, and easy for the receiving department to action.
Context you provide
- {{department_name}} — the department receiving the request
- {{audit_scope}} — what the audit covers
- {{audit_period}} — dates or fiscal periods in scope
- {{regulatory_frameworks}} — policies, standards or obligations being tested
- {{evidence_deadline}} — when items are due
- {{department_contact}} — who owns the response
- {{known_systems}} — systems holding the records
- {{prior_findings}} — open items from earlier audits
- {{confidentiality_notes}} — handling or privilege constraints
Instructions
- Ask for any missing inputs, then confirm the audit scope in one sentence before drafting.
- Group requested evidence by category, for example governance and approvals, transaction records, system access, training records, and exception handling.
- For each item state what is needed, the acceptable format, the source system, the owner, and the due date.
- Mark each item as mandatory or optional, and note where a sample will be selected rather than a full extract.
- Add a short cover note explaining purpose, confidentiality, and how to raise questions.
- Close with a checklist the department can tick off as items are submitted.
Output format — A cover note of three to five sentences, then a table with columns: Item, Description, Format, Source, Owner, Due, Priority. Plain professional tone. No legal advice, no invented document titles.
Guardrails — Do not invent document names, regulation numbers, retention periods or system names; use only what the user supplies. Flag any request that may touch privileged material, personal data or local privacy rules for legal review. Tell the user to confirm the final list with the audit lead or external auditor before sending.
Example — Department: Accounts Payable; Scope: vendor onboarding and payment approvals; Period: FY2025 Q1 to Q3; Deadline: 10 business days; Contact: AP Manager.