ISO 16363:2025

Overview

ISO 16363:2025 - "Space data and information transfer systems - Audit and certification of trustworthy digital repositories" - defines a CCSDS Recommended Practice for auditing and certifying the trustworthiness of digital repositories. Published as the second edition in 2025, it updates and replaces ISO 16363:2012 and aligns the audit criteria with the OAIS Reference Model (ISO 14721). The standard’s scope covers the entire range of digital repositories and provides auditable, evidence-based metrics to evaluate long‑term digital preservation capabilities.

Key topics and technical requirements

ISO 16363:2025 structures its normative metrics into three main domains and introduces clarifying updates such as mention of Preservation Objectives and refined terminology (e.g., “documented” rather than “written”, “information” rather than “metadata”):

• Organizational infrastructure

  • Governance, mission and preservation policy framework
  • Organizational structure, staffing and financial sustainability
  • Contracts, liability and procedural accountability

• Digital object management

  • Ingest processes and creation of Archival Information Packages (AIP)
  • Preservation planning and AIP preservation actions
  • Information management and access controls (SIP/DIP concepts)

• Infrastructure and security risk management

  • Technical infrastructure risk assessment and mitigation
  • Security policies, operational controls, and continuity planning

Other critical elements:

• Use of metrics and evidence to justify trustworthiness claims (logs, documented procedures, policies).
• Emphasis on OAIS concepts (Designated Community, AIP/SIP/DIP) to ensure consistent terminology and expectations.
• Guidance designed to support an ISO audit and certification process for repositories.

Practical applications - who uses this standard

ISO 16363 is intended for:

• Auditors and certification bodies conducting formal repository assessments.
• Repository managers and digital preservation teams seeking objective measures of trustworthiness and gaps to remediate.
• Archivists, libraries, and space data centres aligning preservation activities with ISO/CCSDS practices.
• IT, security, and governance stakeholders implementing risk management, access policies, and sustainability planning.
• Organizations designing or redesigning digital repository systems who want auditable requirements and metrics.

Practical benefits include clearer evidence requirements for certification, a transparent audit framework, and a common vocabulary for long‑term preservation planning.

Related standards

• ISO 14721 (OAIS) - Open Archival Information System (reference model)
• TRAC and earlier Trusted Digital Repositories frameworks (historical bases)
• ISO 16363:2012 - previous edition (superseded)

Keywords: ISO 16363, trustworthy digital repositories, digital preservation, audit and certification, OAIS, Archival Information Package, AIP, repository audit, CCSDS, risk management.