Make sure you have documentation on the creation of the image and some sort of version control. The machine build could be traced to the version of the image that was used. Modifications of the image should constiture a different image version/revision which again is traceable from the target machine.