Just ask and listen to and document the response
I believe this is a sound approach for collecting evidence. Not all evidences are records. Audit evidence is defined by ISO 19011:2018 as "records,
statements of fact or other information, which are relevant to the audit criteria and verifiable". Such information can be obtained by "a)
interviews, b) observation of processes and activities, c) review of documentation and records" as per 9.4.4 of ISO/IEC 17021-1:2015. Even the ISO 9001 Auditing Practices Group Guidance on Evidence Collection has this statement: "Auditors should be aware that objective evidence does not necessarily depend on the existence of documented information, except where specifically mentioned in ISO 9001".
In making the evidence easy for the auditor, another statement from the same APG guidance is very relevant i.e.:
According to the definition, an audit is a “process for obtaining audit evidence and evaluating
it objectively to determine the extent to which the audit criteria are fulfilled”.
That means that the competent auditor will prepare for the audit in order to know what kind
of evidence he or she needs to look for, and will be able to seek out that evidence rather
than requiring the auditee to “serve up the evidence on a plate”.