Which of the following is not a requirement for the I-9 retention system?
1) Reasonable controls designed to prevent and detect unauthorized changes to the forms
2) An inspection and quality assurance program that regularly evaluates the system
3) Password-protected, application-level data encryption
4) Reasonable controls to ensure the system's integrity, accuracy and reliability