Assessments are made based on the amount of deviation
or compliance the company demonstrates to these normative
models. That is, the audit considers whether the company
takes systematic and effective actions for each step, based
on well-considered plans and appropriate techniques. The
assessment is based on a combination of good plans and good
execution of them, as posed by descriptions and documentation.
These steps are scored using a five-point rating scale,
with an accompanying colouring scheme: