We have a process whereby a recurring ticket is generated. The ticket requires a technician to run a report, attach the report to the ticket, then submit it for approval by a supervisor. After it's approved by the supervisor, the ticket is closed.

The Problem:

The closed ticket can be opened and the attached file deleted, and then a different file can be attached, all without requirement for additional approval and without adding a single entry to the History of the ticket. Thus it would be easy to go back and modify a report that is supposed to contain information that should not be modified, or even to deleted the report itself, and no one would know about it.