b) systems designed to detect and give warnings about activities or incidents, c) systems and procedures designed to clarify activities and incidents and the background to them, d) monitoring of undesirable activities and undesirable incidents, or e) a combination of the measures specified in a) to d). Undertakings shall conduct a risk assessment to determine what measures are needed to protect the object or infrastructure. Protection of objects and infrastructure may also include a requirement for access clearance pursuant to section 8-3. The King may issue regulations on the protection of objects and infrastructure at each classification level, and regulations on the use of security forces. Section 7-4.Testing of security measures An undertaking may ask the National Security Authority to attempt to overcome established security measures in order to gain access to critical national objects or infrastructure. The purpose must be to check whether security measures are adequate. The undertakings' employees must be informed that such a check may be performed. If the check entails the processing of personal data, the check shall not be more extensive than necessary for the purpose. Information to which the check provides access may only be used for the purpose of the check. When the information is no longer required, it shall be erased. Knowledge and experience acquired by the National Security Authority through the check may be used in the further development of the National Security Authority's general security work. The National Security Authority shall issue a report to the undertaking on the results of the check. The report shall only contain information which may help to improve the undertaking's security. The King may issue regulations on the testing of security measures related to critical national objects and infrastructure, and regulations authorising the performance of such testing by parties other than the National Security Authority. Section 7-5.Prohibition against accessing locations and areas In the interests of defence, security and contingency preparedness, the King may issue regulations on or make individual decisions providing that persons may not 16/30