It seems obvious to me for you to ask the contractor doing the audit to
provide you with THEIR definitions.
Our company has a contractor performing a corporate wide IT / IS audit.
They've sent out a user survey. One of the questions is:
List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance