Digital repository audit method based on risk assessment

Last updated

The digital repository audit method based on risk assessment (DRAMBORA) is a methodology and associated software-based toolkit developed by Digital Curation Centre (DCC) and DigitalPreservationEurope (DPE) to support the assessment of digital preservation repositories.

The DRAMBORA toolkit is intended to facilitate internal audit of digital preservation repositories by providing repository administrators with a means to assess their capabilities, identify their weaknesses, and recognise their strengths. The development of the toolkit follows a concentrated period of repository pilot audits undertaken by the DCC, conducted at a diverse range of organisations including national libraries, scientific data centres and cultural and heritage data archives. The construction of a toolkit of this kind is a dynamic process and this is the second stage in this process. The DRAMBORA toolkit represents the latest development in an ongoing international effort to conceive criteria, means and methodologies for audit and certification of digital repositories. The intention throughout its development was to build upon, extend and complement existing efforts. A key requirement has been to establish a toolkit that contributes towards a single process for repository assessment. The importance of international cooperation and collaboration, and the potential dangers associated with divergence were acknowledged very early on within the DCC and DPE's work in this area.

The results of the original efforts of RLG/NARA task force and the nestor working group to develop criteria for audit and certification of trustworthy digital repositories and the work that was led by the Center for Research Libraries (CRL) were foremost within the considerations throughout the development of the DRAMBORA toolkit, and in the DCC-led pilot audits that preceded it. The DCC/DPE working group has engaged with representatives of other groups to agree upon a set of principles, representing the fundamental, objective baseline criteria for preservation repositories, and these and their underlying concepts, are profoundly important within the toolkit. It is anticipated that self-audit based on DRAMBORA can be facilitated if undertaken in association with one or both of the check-lists, and vice versa. The risk-based approach assists efforts to match a repository against these lists of requirements. Only with a clear view of an organisation's business context and its implicit risks can an auditor effectively use these requirements. The toolkit contextualises these lists so they can be more effectively applied. In addition to these resources, we have also sought to incorporate and adapt ideas and concepts from an additional, diverse range of sources, including a wide range of international information standards, many with their basis in the risk management industry aiming to broaden ever further the perspectives that our international colleagues have already established.

DRAMBORA is released under the Creative Commons Attribution – Non-Commercial – Share-Alike 2.0 License. [1]

See also

Related Research Articles

In library and archival science, digital preservation is a formal process to ensure that digital information of continuing value remains accessible and usable in the long term. It involves planning, resource allocation, and application of preservation methods and technologies, and combines policies, strategies and actions to ensure access to reformatted and "born-digital" content, regardless of the challenges of media failure and technological change. The goal of digital preservation is the accurate rendering of authenticated content over time.

Information security standards or cyber security standards are techniques generally outlined in published materials that attempt to protect the cyber environment of a user or organization. This environment includes users themselves, networks, devices, all software, processes, information in storage or transit, applications, services, and systems that can be connected directly or indirectly to networks.

<span class="mw-page-title-main">Product certification</span> Performance and quality assurance

Product certification or product qualification is the process of certifying that a certain product has passed performance tests and quality assurance tests, and meets qualification criteria stipulated in contracts, regulations, or specifications.

The term Open Archival Information System refers to the ISO OAIS Reference Model for an OAIS. This reference model is defined by recommendation CCSDS 650.0-B-2 of the Consultative Committee for Space Data Systems; this text is identical to = 57284 ISO 14721:2012. The CCSDS's purview is space agencies, but the OAIS model it developed has proved useful to other organizations and institutions with digital archiving needs. OAIS, known as ISO 14721:2003, is widely accepted and utilized by various organizations and disciplines, both national and international, and was designed to ensure preservation. The OAIS standard, published in 2005, is considered the optimum standard to create and maintain a digital repository over a long period of time.

PRONOM is a web-based technical registry to support digital preservation services, developed by The National Archives of the United Kingdom. PRONOM was the first and remains, to date, the only operational public file format registry in the world, although the "Magic File" repository of the File Command has served this role in a less formal capacity for two decades. Other projects to develop technical registries, including the UK Digital Curation Centre's Representation Information Registry, and the Global Digital Format Registry project at Harvard University, are now in progress.

The Humanities Advanced Technology and Information Institute (HATII) was a research and teaching institute at the University of Glasgow in Scotland. It was established in 1997 with Professor Seamus Ross as Founding Director until 2009. HATII led research in archival and library science and in information/knowledge management. Research strengths were in the areas of humanities computing, digitisation, digital curation and preservation, and archives and records management.

The Digital Curation Centre (DCC) was established to help solve the extensive challenges of digital preservation and digital curation and to lead research, development, advice, and support services for higher education institutions in the United Kingdom.

The Trillium Model, created by a collaborative team from Bell Canada, Northern Telecom and Bell Northern Research combines requirements from the ISO 9000 series, the Capability Maturity Model (CMM) for software, and the Baldrige Criteria for Performance Excellence, with software quality standards from the IEEE. Trillium has a telecommunications orientation and provides customer focus. The practices in the Trillium Model are derived from a benchmarking exercise which focused on all practices that would contribute to an organization's product development and support capability. The Trillium Model covers all aspects of the software development life-cycle, most system and product development and support activities, and a significant number of related marketing activities. Many of the practices described in the model can be applied directly to hardware development.

Scholarly communication involves the creation, publication, dissemination and discovery of academic research, primarily in peer-reviewed journals and books. It is “the system through which research and other scholarly writings are created, evaluated for quality, disseminated to the scholarly community, and preserved for future use." This primarily involves the publication of peer-reviewed academic journals, books and conference papers.

The Digital Preservation Award is an international award sponsored by the Digital Preservation Coalition. The award 'recognises the many new initiatives being undertaken in the challenging field of digital preservation'. It was inaugurated in 2004 and was initially presented as part of the Institute of ConservationConservation Awards. Since 2012 the prize, which includes a trophy and a cheque, is presented independently. Awards ceremonies have taken place at the British Library, the British Museum and the Wellcome Trust.

Preservation metadata is item level information that describes the context and structure of a digital object. It provides background details pertaining to a digital object's provenance, authenticity, and environment. Preservation metadata, is a specific type of metadata that works to maintain a digital object's viability while ensuring continued access by providing contextual information, usage details, and rights.

Trustworthy Repositories Audit & Certification (TRAC) is a document describing the metrics of an OAIS-compliant digital repository that developed from work done by the OCLC/RLG Programs and National Archives and Records Administration (NARA) task force initiative.

The Center for Research Libraries is a consortium of North American universities, colleges, and independent research libraries, based on a buy-in concept for membership of the consortia. The consortium acquires and preserves traditional and digital resources for research and teaching and makes them available to member institutions through interlibrary loan and electronic delivery. It also gathers and analyzes data pertaining to the preservation of physical and digital resources, and fosters the sharing of expertise, in order to assist member libraries in maintaining their collections.

Digital curation is the selection, preservation, maintenance, collection, and archiving of digital assets. Digital curation establishes, maintains, and adds value to repositories of digital data for present and future use. This is often accomplished by archivists, librarians, scientists, historians, and scholars. Enterprises are starting to use digital curation to improve the quality of information and data within their operational and strategic processes. Successful digital curation will mitigate digital obsolescence, keeping the information accessible to users indefinitely. Digital curation includes digital asset management, data curation, digital preservation, and electronic records management.

Seamus Ross is a digital humanities and digital curation academic and researcher based in Canada.

<span class="mw-page-title-main">IT risk management</span>

IT risk management is the application of risk management methods to information technology in order to manage IT risk, i.e.:

The UK Data Service is the largest digital repository for quantitative and qualitative social science and humanities research data in the United Kingdom. The organisation is funded by the UK government through the Economic and Social Research Council and is led by the UK Data Archive at the University of Essex, in partnership with other universities.

<span class="mw-page-title-main">Collections management</span> Process of overseeing a collection, including acquisition, curation, and deaccessioning

Collections management involves the development, storage, and preservation of cultural property, as well as objects of contemporary culture in museums, libraries, archives and private collections. The primary goal of collections management is to meet the needs of the individual collector or collecting institution's mission statement, while also ensuring the long-term safety and sustainability of the cultural objects within the collector's care. Collections management, which consists primarily of the administrative responsibilities associated with collection development, is closely related to collections care, which is the physical preservation of cultural heritage. The professionals most influenced by collections management include collection managers, registrars, and archivists.

Keeping the foresight of rapidly changing technologies and rampant digital obsolescence, in 2008, the R & D in IT Group, Ministry of Electronics and Information Technology, Government of India envisaged to evolve Indian digital preservation initiative. In order to learn from the experience of developed nations, during March 24–25, 2009, an Indo-US Workshop on International Trends in Digital Preservation was organized by C-DAC, Pune with sponsorship from Indo-US Science & Technology Forum, which lead to more constructive developments towards formulation of the national program.

<span class="mw-page-title-main">Helen Tibbo</span> American archivist

Helen Ruth Tibbo is an American archivist, professor and author writing about digital preservation in the archival profession. At the University of North Carolina, she created and directed the first American master's degree on digital curation. She is a past President of the Society of American Archivists

References

  1. "Welcome to DRAMBORA: Important Notices".