Space data and information transfer systems — Requirements for bodies providing audit and certification of candidate trustworthy digital repositories

This document defines a CCSDS Recommended Practice (and ISO standard) on which to base the operations of the organization(s) which assess the trustworthiness of digital repositories using the latest version of CCSDS 652.0/ISO 16363 (reference REF
R_652x0m2AuditandCertificationofTrustwor h[1]
08D0C9EA79F9BACE118C8200AA004BA90B02000000080000002900000052005F00360035003200780030006D0032004100750064006900740061006E006400430065007200740069006600690063006100740069006F006E006F0066005400720075007300740077006F0072000000
) and provide the appropriate certification. This document specifies requirements for bodies providing audit and certification of digital repositories, based on the metrics contained within ISO/IEC 17021-1 (reference ?REF R_ISOIEC170212011ConformityAssessmentReq
h ?* MERGEFORMAT [4]
08D0C9EA79F9BACE118C8200AA004BA90B02000000080000002900000052005F00490053004F0049004500430031003700300032003100320030003100310043006F006E0066006F0072006D006900740079004100730073006500730073006D0065006E0074005200650071000000
) and reference REF
R_652x0m2AuditandCertificationofTrustwor h[1]
08D0C9EA79F9BACE118C8200AA004BA90B02000000080000002900000052005F00360035003200780030006D0032004100750064006900740061006E006400430065007200740069006600690063006100740069006F006E006F0066005400720075007300740077006F0072000000
. It is primarily intended to support the accreditation of bodies providing such certification.

ISO/IEC 17021-1 provides the bulk of the requirements on bodies offering audit and certification for general types of management systems. However, for each specific type of system, specific additional requirements will be needed, for example, to specify the standard against which the audit is to be made and the qualifications which auditors require.

This document provides the (small number of) specific additions required for bodies providing audit and certification of candidate trustworthy digital repositories. Trustworthy here means that they can be trusted to maintain, over the long-term, the understandability and usability of digitally encoded information placed into their safekeeping.

In order improve readability the section numbers are kept consistent with those of ISO/IEC 17021-1. Some subsections are applicable as they stand, and these are simply enumerated; otherwise additions to subsections are explicitly given. In the former case the sections may consist of just a few sentences. As a result this document must be read in conjunction with ISO/IEC 17021-1.

The requirements contained in this CCSDS Recommended Practice need to be demonstrated in terms of competence and reliability by any organization or body providing certification of digital repositories.

Edition	2025
Published Date	2025
Published By	International Standardization Organisation
Page Count	23

ISO

ISO 16826:2025

ISO 16834:2025

ISO 16840-12:2021/Amd 1:2025

ISO 16840-13:2021/Amd 1:2025

ISO 16847:2025

ISO 16900-11:2025

ISO 16919:2025

ISO 17506:2022/Amd 1:2025

ISO 17715:2025

ISO 17956:2025

ISO 18184:2025

ISO 18190:2025