We are in process of refining our compliance auditing program and would like to establish an internal rating system to be able to identify areas of strength and weakness. How has everyone else done this? What are the criteria for each rating? Thanks,