External documentation may lack reliability,even if the auditor receives it directly. The most probable reason for this is that:

The documentation may be properly understood by the client in the response

The external party may be competent in performing duties

The documentation may have been altered if the process is not controlled from inception

The auditor may decide not to use the documentation and replace it with other documents