The assessment document is based on a format used by the Institute of Internal Audits and uses seventy criteria provided in the U.S. Department of Justice guidelines and U.S. Federal Acquisition Regulations.