Space data and information transfer systems — Requirements for bodies providing audit and certification of candidate trustworthy digital repositories
空间数据和信息传输系统 - 为候选值得信赖的数字存储库提供审计和认证的机构的要求
发布日期:
2014-10-29
ISO 16919:2014主要针对建立和管理数字存储库审计和认证组织的人员。
对于那些在数字存储库中工作或负责数字存储库的人来说,它也应该有用,这些人寻求对其存储库的可信度进行客观测量,并希望了解所涉及的过程。
主要目的是定义CCSDS推荐做法(和ISO国际标准),以作为组织运营的基础,该组织使用ISO 16363评估数字存储库的可信度,并提供适当的认证。ISO 16919:2014根据ISO/IEC 17021和CCSDS 652中包含的指标,规定了对提供数字存储库审计和认证的机构的要求。
0-M-1/ISO 16363。其主要目的是支持提供此类认证的机构的认证。
ISO/IEC 17021规定了对提供一般管理体系审计和认证的机构的大部分要求。然而,对于每种特定类型的系统,都需要特定的附加要求,例如,规定审计所依据的标准和审计员所要求的资格。
ISO 16919:2014提供了对候选可信数字存储库进行审计和认证的机构所需的(少量)特定补充。值得信赖在这里意味着他们可以被信任长期维护-
术语,指置于其安全保管中的数字编码信息的可理解性和可用性。
为了提高可读性,条款编号与ISO/IEC 17021保持一致。有些子条款目前是适用的,只是简单列举了一下;否则,将明确给出子条款的补充内容。在前一种情况下,条款可能只包含几句话。因此,必须结合ISO/IEC 17021阅读本文件。
本文件中包含的要求需要由提供数字存储库认证的任何组织或机构在能力和可靠性方面进行证明。
ISO 16919:2014 is meant primarily for those setting up and managing the organization performing the auditing and certification of digital repositories.
It should also be of use to those who work in or are responsible for digital repositories seeking objective measurement of the trustworthiness of their repository and wishing to understand the processes involved.
The main purpose is to define a CCSDS Recommended Practice (and ISO International Standard) on which to base the operations of the organization(s) which assess the trustworthiness of digital repositories using ISO 16363 and provide the appropriate certification. ISO 16919:2014 specifies requirements for bodies providing audit and certification of digital repositories, based on the metrics contained within ISO/IEC 17021 and CCSDS 652.0-M-1/ISO 16363. It is primarily intended to support the accreditation of bodies providing such certification.
ISO/IEC 17021 provides the bulk of the requirements on bodies offering audit and certification for general types of management systems. However, for each specific type of system, specific additional requirements will be needed, for example, to specify the standard against which the audit is to be made and the qualifications which auditors require.
ISO 16919:2014 provides the (small number of) specific additions required for bodies providing audit and certification of candidate trustworthy digital repositories. Trustworthy here means that they can be trusted to maintain, over the long-term, the understandability and usability of digitally encoded information placed into their safekeeping.
In order improve readability, the clause numbers are kept consistent with those of ISO/IEC 17021. Some subclauses are applicable as they stand, and these are simply enumerated; otherwise additions to subclauses are explicitly given. In the former case, the clauses may consist of just a few sentences. As a result, this document must be read in conjunction with ISO/IEC 17021.
The requirements contained in this document need to be demonstrated in terms of competence and reliability by any organization or body providing certification of digital repositories.