Test a live control against a sample, record findings and evidence, and let a deterministic scoring rule set the effectiveness rating and next test due date.