A Document Request List (DRL) is a way for auditors to keep track of your organization's provided evidence items and how they satisfy (or don't fully satisfy) your specified controls. Auditors use this sheet to communicate any requests to help complete a successful audit.

The DRL will look something like the screenshot below:

The DRL is shared after the auditor completes their initial review of your audit export. This generally occurs towards the end of the first week or the beginning of the second week of the audit sprint. It's likely that a few iterations of the DRL will follow, as more follow-ups can be located during the audit team's multi-level review of your organization's audit package.

The audit team's most urgent requests are located within the Auditor's Remark as of [Date] column on Sheet 2. Feel free to respond directly within the [Organization]'s Response column if you have any comments/questions for the audit team. All items labeled Follow-Up must be addressed by your team before progressing to the next stage of the audit.

Any requested evidence revisions or additions should be uploaded directly to your Strike Graph account. Please indicate your team's status of the follow-ups within the column titled [Organization]'s Status. Customer Success Managers (CSMs) will generate a new export for the audit team's review once all follow-ups have been marked as Done.

The audit team may also include recommendations related to evidence and/or control descriptions. Your CSM will walk through all recommendations during your team's post-audit retro call, so don't worry about actioning upon them right away. The implementation of recommendations (or lack thereof) will not impair the progress of your audit.