u Storage of a digitally signed copy of the configuration item with its
configuration item progress verification report
u Separation of roles/access privileges, and least privilege enforcement,
for SCM system users