Certbie
Question 1 of 30
During an audit of a digital repository claiming compliance with ISO 16363:2012, an auditor discovers that while the repository utilizes a cryptographic hashing algorithm for data integrity checks, the audit logs detailing the application of these hashes to ingested objects and subsequent verification events are fragmented and lack the specific parameters used for each hashing instance. The repository management asserts that the hashing process is functioning correctly. What is the most appropriate auditor action to ensure the repository\'s trustworthiness in this regard?
Request the repository to provide a comprehensive, verifiable audit trail for a representative sample of digital objects, including the specific hashing algorithm parameters and verification timestamps, or conduct a confirmatory audit on a subset of objects to validate the integrity checking process.
Accept the repository's assertion of correct functioning, noting the discrepancy in the audit logs as a minor procedural issue, and focus audit efforts on other clauses of the standard.
Recommend the repository implement a new, more robust logging system for future ingestions and verifications, but deem the current state acceptable for the purpose of this audit based on the stated intent.
Document the absence of complete audit trail data as a non-conformity and require the repository to immediately rectify the logging system before any further assessment of integrity controls can proceed.

Preparing for ISO 16363:2012 - Trustworthy Digital Repositories Lead Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free