I don't think ISO 16363 certification will be used this way, by commercial cloud providers. Some might refer to the standard, to demonstrate the extent to which they can support long-term preservation but I think the certifications will be done for public-sector repositories of research data & cultural heritage materials: repositories which own the materials they're preserving, and serve specific communities.

If you look at current cloud service providers most obviously involved in long-term archival preservation -- e.g., Tessella's Preservica (http://preservica.com/) and Duracloud (http://www.duracloud.org/)  -- they don't appear to aspire to ISO-16363 certification, but instead to provide the software & storage infrastructure needed by organizations that want to establish TDRs but can't afford the necessary IT investment.

Chris
_____________________________________

Chris Halonen
University Records Manager
Secretariat & Office of General Counsel
University of Waterloo
519-888-4567, ext. 38284
http://uwaterloo.ca/records-management/


-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On Behalf Of Hugh Smith
Sent: Tuesday, 22 September 2015 12:11
To: [log in to unmask]
Subject: [RM] ISO Certification of Trustworthy Digital Repositories

Do any of you have a requirement for your Cloud provider to be a “Trusted Digital Repository” and audit them?

Do you adopt ISO 16363 as a required Standard?  As I understand it this document requires a service provider or owner of the data to maintain the digital resources over time and ensure “long-lived” collections of digital content and data.  This requires users the ability to  provide longitudinal or time lapse studies which prove the integrity of the information resource or data and be able to clearly demonstrate the accuracy and integrity of the data archive.  And that such data archive is researchable over time regardless of migrations of data or changes in hardware.   

I think this works in theory but over time is impossible??  For example, on my last update of computers they eliminated the ability to read or print a CD.  I have clients that require I provide a final CD of their plans as “As Built" Drawings.  I can no loner do this.  One simple change and it affects everything.

I send PDF’s and they tell me they can’t read them.  Acrobat software keeps changing and leaving older versions behind.  How can we have integrity if the computer manufacturers no longer respond to us?

Can anyone really believe that their Cloud provider will not make changes that might affect them?  Do they even have a requirement to alert you to every internal change?

Hugh Smith
FIRELOCK Fireproof Modular Vaults
[log in to unmask]
(610)  756-4440    Fax (610)  756-4134
WWW.FIRELOCK.COM

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]