5.2.3.5  Control and Security of Electronic Data and Information  The Laborator y shall implement a ll reasonable measures, based on a thorough risk and vulnerability assessment s (e.g., by a competent third party) , to prevent and to detect unauthorized access and copying of Laboratory  data and information from  local and/or cloud -based computerized systems.