This question already has an answer here:
I work in as an IT auditor in the InfoSec profession. A colleague of mine in the IT Security department has asked me to peer review / provide my professional opinion on an application penetration testing / vulnerabilities report he has completed. This particular report is scheduled to be presented to senior management later this week.
My department cooperates frequently with Information Security department in a lot of the work we do. In the past, the InfoSec department has been very helpful to me in other work I did (PCI compliance among several other projects). I also have completed peer reviews in the past for work to be presented to management, both for my colleagues within my department, and for InfoSec team members.
However, I have several end of the quarter tasks that must be done by the end of the week to include different reviews / process audits. On top of this all, I am also in the middle of planning for several audits that will begin at the end of the year. I do not think I will have enough time to provide a professional, through peer review to my colleague with all the work I have. Anything less than through and honest feedback I feel would be unprofessional on my part.
How do I communicate to my colleague in Information Security that I cannot complete his request as politely as possible?