How should the CSR Assessment be carried out in an organisation?