Note that the criteria were that it:
"met agreed rollout dates within budget and achieving the key user requirements"
So, if you manage to write your KURs vaguely and fudge them when you bring the thing into service, it looks like you did well.
Anyone from the former DPA recognise this model?