The measures protecting documents, accounts and signature evidence — and an honest account of what is not yet in place.