We evaluate the same five dimensions for each metric (Policy, Authorization, Responsible, Implementation, and Reporting), assigning each dimension a score from no policy available) to 4 (e.g. has policy, ongoing initiatives and system is continuously improved).