The asset owner shall have policies and procedures related to verifying the authenticity and integrity of all patches prior to installation.