I have been asked for a Stocklist in advance of my audit, what format does it need to take, why is it needed and what steps can be taken to ensure it is kept confidential?