It is not a regulatory issue per se, it is a control issue. What happens to the devices when they get the branch, are they maintained under strict dual control, what keeps a branch employee from ordering a device on an inactive account and draining it. It is just not a good process from a security standpoint. Why would they not be mailed directly to the customer??
_________________________
The opinions expressed here should not be construed to be those of my employer:
PPDocs.com