Risk in trustworthy digital repository audit and certification

Abstract Risk is a foundational concept in digital preservation. While it has been examined from technical, economic, and organizational perspectives, I argue that also social phenomenon. In this study report on the results 42 interviews with stakeholders Trustworthy Repositories Audit & Certification (TRAC) system, analysis of documents relating to ISO 16363 standard order examine how developers, auditors, repository staff members understand risk for repositories. The research demonstrate these three stakeholder groups identified TRAC audit certification process terms specific potential threats or sources risk, which have organized into five main categories: finance, legal, governance, processes, technical infrastructure. generally shared an understanding major face repositories, they disagreed about whether risks can be mitigated mitigation proven. Individuals who were more removed day-to-day work repositories undergoing likely accept well-documented identification strategies as sufficient evidence trustworthiness, while skeptical documentation was assessment thus questioned would translate actual trustworthiness long-term