Establishment and maintenance should include
identifying the rationale, components, and governance of a chain of custody
describing the operating procedures that ensure the chain of custody.