We base the frequency of second-party audits on a risk assessment that takes into account the audit competency and the type of facility, the inherent risk of the facility, the effectiveness of the EHS systems, past EHS performance metrics at the site, and other external factors.