I agree with Helmut. Crusader, before you go too far down this road, points scoring will lead to exactly the wrong behaviour IMHO. It will become a case of "points" and not management understanding what they need to do to effectively manage their processes and use audit to validate that. I've encountered too many managers who simply pick up on easy to grasp numbers and completely overlook what they mean! As a CB auditor, too many people wanted to know how they compared on the total number of ncs that other companies get - what a stupid question. They might have just 1! "The system is not implemented".
So, I'd appeal to you to review what is necessary to drive management to do something - which is going to be risk based - risk to customers, their satisfaction, compliance to regs (if applicable, risk to stakeholders (usually $$$) or their personal risk of missing their objectives. That will be sufficient to get action, not "50/100".