If you're a company that has 20 facilities, all run in more or less the same way, it means you expect to be checked every year.

As I said: 5% may be too low. But perhaps 20% would be good/great.