Employees in a defined pool are chosen using a scientifically generated random process, so every person has an equal chance of selection at each draw. The selection is documented to keep the program defensible, and selected employees are notified and tested promptly to preserve the integrity of the random draw.