Without developing the criteria that the system should meet and then effectively assessing the risks, agencies could adopt signature systems that will not provide the necessary data integrity.
Some systems don't give the necessary data integrity.