Who does the verification? Who does guard the keys? Who is responsible when keys go missing and "prove" false information? Just saying "we need to sign photos"

Who does the verification? Who does guard the keys? Who is responsible when keys go missing and "prove" false information? Just saying "we need to sign photos" isn't enough and simply naïve.