Sampling
The assessment process relies on taking a sample of the activities of the business. This is not statistically based but uses representative examples. Not all of the detailed nature of a business may be sampled so, if no issues are raised in a particular process, it does not necessarily mean that there are no issues, and if issues are raised, it does not necessarily mean that these are the only issues.