What needs to be independently tested?

Tell Rulint enough to understand the compliance area, product, process, control, or testing objective. Initial scoping does not require confidential customer information or production data.