ISO 16919-2025 PDF

Full title and description

Space data and information transfer systems — Requirements for bodies providing audit and certification of candidate trustworthy digital repositories. This International Standard defines specific additional requirements for organizations that audit and certify digital repositories as "trustworthy", to be used together with ISO/IEC 17021‑1 and the metrics contained in ISO 16363 (and associated CCSDS recommendations).

Abstract

ISO 16919:2025 specifies the limited set of repository‑specific requirements that certification bodies must meet in order to audit and certify candidate trustworthy digital repositories. It is intended to support accreditation of such certification bodies and to ensure audits are carried out consistently, competently and with appropriate impartiality, based on the repository metrics defined in ISO 16363 and using the framework of ISO/IEC 17021‑1.

General information

• Status: Published
• Publication date: March 2025
• Publisher: International Organization for Standardization (ISO)
• ICS / categories: 49.140; 03.120.20
• Edition / version: Edition 2 (2025)
• Number of pages: 23

Scope

This document provides the specific additions and clarifications to ISO/IEC 17021‑1 required for bodies that perform audits and certification of candidate trustworthy digital repositories. It is to be read and applied in conjunction with ISO/IEC 17021‑1 and uses the repository assessment metrics in ISO 16363 (and related CCSDS recommendations) as the normative basis for what is audited. The standard supports accreditation bodies, certification bodies and stakeholders in the digital preservation community.

Key topics and requirements

• Scope of applicability for certification bodies auditing digital repositories.
• Requirements on competence, independence and impartiality of audit teams and certification bodies.
• Reference to and use of repository metrics from ISO 16363 (CCSDS guidance) as the technical basis for assessment.
• Requirements for audit planning, evidence collection, reporting and certification decision-making consistent with ISO/IEC 17021‑1.
• Criteria for auditor qualifications, ongoing training and maintenance of technical expertise in digital preservation domains.
• Requirements to demonstrate conformity to accreditation authorities and maintain records supporting certification outcomes.

Typical use and users

Primary users are accreditation bodies, certification bodies and auditors who assess digital repositories for trustworthiness. Secondary users include digital repository managers, academic and national archives, libraries, research funders, policy makers and organizations that require demonstrable long‑term preservation guarantees for digital information. The standard is used to design certification schemes, prepare for audits and to guide auditor competence development.

Related standards

Key related documents include ISO 16363 (Audit and certification of trustworthy digital repositories), ISO 14721 (OAIS reference model) and ISO/IEC 17021‑1 (conformity assessment — requirements for bodies providing audit and certification of management systems). The standard aligns repository‑specific audit requirements with these references and with relevant CCSDS publications.

Keywords

trustworthy digital repository; audit; certification; repository metrics; ISO 16363; OAIS; ISO/IEC 17021; accreditation; digital preservation; CCSDS.

FAQ

Q: What is this standard?

A: ISO 16919:2025 defines requirements for bodies that provide audit and certification of candidate trustworthy digital repositories, specifying the repository‑specific additions to the general auditing requirements of ISO/IEC 17021‑1.

Q: What does it cover?

A: It covers the targeted requirements for certification bodies — including competence, impartiality, audit conduct, reporting and evidence — when assessing repositories against the repository metrics and criteria set out in ISO 16363 (and CCSDS guidance).

Q: Who typically uses it?

A: Accreditation bodies, certification bodies, auditors, repository operators (libraries, archives, data centres), funders and other stakeholders involved in establishing or assuring long‑term trust in digital preservation services.

Q: Is it current or superseded?

A: The 2025 edition (Edition 2) is the current published version; it replaces the withdrawn 2014 edition.

Q: Is it part of a series?

A: Yes — it is closely associated with ISO 16363 (repository metrics) and ISO 14721 (OAIS), and is intended to be used alongside ISO/IEC 17021‑1 for conformity assessment processes. It also reflects CCSDS recommended practice on repository certification.

Q: What are the key keywords?

A: Trustworthy digital repository, audit, certification, accreditation, digital preservation, ISO 16363, OAIS, auditor competence.