You can write down a procedure to weigh them, measure them, document chain of custody, etc.<p>With a computerized process, how do you assure that the code isn&#x27;t tampered with? Or that the OS is tampered with? You <i>can</i> do it, but the average auditor from KPMG or Deloitte can&#x27;t, and the people who can are hard to find.