Licensees must conduct regular security tests of their systems, network, and connections.