Not sure what you mean by criteria. We have developed a set of services to help us understand how well the team behind an ICO manages their cybersecurity risks
What are the criterias for grading the ICOs?
I doublt your analysis will be full, without making an audit of smart contracts, for example. I was asking about such things.