Hi there and welcome to the forum.
Are you implementing your new points program using software? And if so, what software?
I wouldn't add up the points by year. Rather, I would keep a record of each violation by date and by employee, and the number of points incurred. Then, to determine an employee's point score calculate it from your stored data as required. Also, if there is a mechanism by which points are reduced over time, enter those events as if they were a 'negative violation'. This will be a lot like a listing of a bank account, except not using dollars, and you can periodically issue 'statements' that indicate and employees current 'balance.'
Cheers,
Mark