Your best estimate is enough.
We ask for this at the end so you can explore the Audit first.
Describe the process, not passwords, payment data, patient information, or confidential customer records.