The security question belongs to the data-bearing component, not just the chassis.
Drives and other data-bearing components retain their own identity and relationship to the parent asset so evidence does not stop at a device-level certificate.
- Component-to-parent relationship
- Serial and diagnostic context
- Custody continuity