Methods, computer readable media, and apparatuses for evaluating compliance with laws, regulations, and/or policies are presented. A metric definition for a metric may be received, the metric measuring an aspect of a business process. The measured aspect may represent a compliance concern. A first sigma score for the metric may be determined based on a number of opportunities and a number of defects. A second sigma score for the business process may be determined. A third sigma score for a business unit may be determined, the business unit implementing the business process. A fourth sigma score for a business segment may be determined, the business segment managing the business unit. A report may be generated, the report including the first sigma score, the second sigma score, the third sigma score, and the fourth sigma score.