Do any of you have a requirement for your Cloud provider to be a “Trusted Digital Repository” and audit them?

Do you adopt ISO 16363 as a required Standard?  As I understand it this document requires a service provider or owner of the data to maintain the digital resources over time and ensure “long-lived” collections of digital content and data.  This requires users the ability to  provide longitudinal or time lapse studies which prove the integrity of the information resource or data and be able to clearly demonstrate the accuracy and integrity of the data archive.  And that such data archive is researchable over time regardless of migrations of data or changes in hardware.   

I think this works in theory but over time is impossible??  For example, on my last update of computers they eliminated the ability to read or print a CD.  I have clients that require I provide a final CD of their plans as “As Built" Drawings.  I can no loner do this.  One simple change and it affects everything.

I send PDF’s and they tell me they can’t read them.  Acrobat software keeps changing and leaving older versions behind.  How can we have integrity if the computer manufacturers no longer respond to us?

Can anyone really believe that their Cloud provider will not make changes that might affect them?  Do they even have a requirement to alert you to every internal change?

Hugh Smith
FIRELOCK Fireproof Modular Vaults
[log in to unmask]
(610)  756-4440    Fax (610)  756-4134
WWW.FIRELOCK.COM

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]