At least a 2 - requires improvement.
It should also be pointed out that automatically declaring an installation with a category 2 deviation "Unsatisfactory" is an NICEIC and NOT an IET requirement.
if, as you say, a code 2 is " requires improvement" but can still be deemed as satisfactory, then i've no argument with that.