Get evidence as a by-product of doing the work

a review, a regulator, a client due diligence Risk, Compliance and Audit Evidence