You need to explain what the application does for the business.
The rule exists, but it is spread across code, data and programs. Documentation is not current enough to stand as evidence.
Business rules in natural language, the source that supports them and the data, programs and processes behind the answer.
Audit, examination and system-of-record questions become evidence reviews instead of open-ended investigations.