The GOG installer incorporates a basic integrity check. Additionally, any good disc-burning program includes a data verification step after burning so you know straight away that the files you have burned are byte-exact copies of the local files. To do your own integrity check you can use something like
HashTab, which adds a File Hashes tab to the Properties window.
For reference, the checksums for TOCA 3 should be as follows (I don't have CMR so I don't know what its checksums are).
setup_toca_3.exe CRC32: 7E86E7EF
MD5: 8B6D95AD2DF0EFC19309DC75CD233322
SHA-1: DC38029E24046FC9476A20796ED207A3A887FE2D
setup_toca_3-1.bin CRC32: 39A0D8C2
MD5: 4187245C9D32A7DDD930F26FC75DC58D
SHA-1: D93256F859B620D50239685555B6D6E1B3A027EB
setup_toca_3-2.bin CRC32: 63ABC971
MD5: 4B3B4235D439A2409DBB108981ABC147
SHA-1: 711F52BB1E42E9A5033A9C1246F5EDA19904136C
setup_toca_3-3.bin CRC32: 36751672
MD5: D6A5A69F5F6A5506ADAEA2C80835B183
SHA-1: 6BB3A68A363948DCBF409B82EC1E17E89B97E23F