A clear audit log of decision making must be kept. Staff with decision-making responsibilities must have the adequate expertise, particularly from a technological standpoint, to make such decisions.