audits of every facility, which assess the inherent risk in the facility’s process, the performance history, compliance with laws and applicable standards, including management systems, and the results of the last audit, in determining the audit frequency.