Security assessments of these facilities should take place every three years .
Random testing of security procedures should also take place .
the process of making sure data is entered and stored correctly