Not less often than once every 3 years, the Commission shall conduct security evaluations at each licensed facility that is part of a class of licensed facilities, as the Commission considers to be appropriate, to assess the ability of a private security force of a licensed facility to defend against any applicable design basis threat.