Customer Review: I think it is decent guidance. As for any type of assessment, it is all in your scope and how you interpret the guidance. Even if you do not pay to be ISO certified compliant, it is good to use to assess your processes against. There are no maturity levels here. It is all or nothing with ISO.