My understanding is any assessment must have a hash of assessment artifacts and kept for 6 years. I assume once you finalize the assessment all hash values would need to be collected and stored offline somewhere for 6 years. What happens with a new assessment then ? Does one copy the entire 1st assessment final and use for the 2nd assessment so that changes can be compared to the first as to what's changed?