Pondering on security assurance nomenclature.
Is an audit a pen test, does an audit include testing, what is a pen test and what the hell is a build review?
All these words have somewhat different meanings depending on where you reside...
Which is fun when you work for a multi-national.