The frequency of testing depends on company policy and risk assessment. Regular, unannounced tests can act as a deterrent.