IDR responses, engagement scoping, key facts, workpapers, and how to run a defensible audit representation.