Update an information request for an audit
Updates an existing information request for an audit, allowing modification of request details as audit requirements evolve. Supports partial updates where only specified fields are changed; omitted fields remain unchanged.
Common use cases:
- Updating due dates as audit timelines shift
- Refining descriptions to clarify requirements
- Adjusting request type
Note: The modificationDate is automatically updated to the current timestamp
when any field is changed.
Rate limit: 50 requests / minute.
Authorizations
Body
Input for partially updating an information request. Only provided fields will be updated; omitted fields remain unchanged. At least one field must be provided.
The complete desired set of control IDs linked to this request. Send the full list to replace the set, an empty array to clear it, or omit the property to leave links unchanged. Each ID must identify an existing control in the customer's organization and is returned by the audit controls endpoint. The request is rejected if any ID does not match a control.
Response
Ok
Information Request resource representing a single request for audit evidence from a customer.
An information request is created by an auditor and shared with the customer organization. The customer then uploads evidence, which the auditor reviews and either approves or flags for issues.
Deprecated control-linkage field retained for response compatibility. It
may contain control IDs supplied directly to the request, but it is not a
complete or guaranteed-current list of controls linked to the request. Use
linkedControlIds for the complete current list.
Audit segments this request is assigned to. Empty means unassigned. Resolved against the current audit scope — stale IDs are dropped.
This field is a current-scope projection, not a stored watermark. An
audit-scope change that drops or adds IDs here does not update
creationDate, modificationDate, or deletionDate, so it does not appear in
changedSinceDate delta sync on its own. Re-fetch the list without that
parameter, or GET the request by id, to see the current projection.