The third party guy has no incentive to be more or less stringent that the regs require and 99.9% of the time this equates to a 'pass'
If this statistic is accurate, then that's a big problem. Fundamentally it's an absence of quality control at an organisation's most visible and high profile level. How can everybody be up to scratch all the time?