====== Overview Task 2.3 of Phase III ======


  * [[gfbio:workflow|Data workflow]]
  * [[gfbio:internal_workflow|internal Data workflow]] 

  * [[https://datacenter.zfmk.de/wiki/datapolicy|Data Policy for ZFMK Data Center]]
  * [[https://datacenter.zfmk.de/wiki/terms_of_use|Terms of Use]]
  * [[https://datacenter.zfmk.de/wiki/privacypolicy|Privacy Policy]]
  * [[https://datacenter.zfmk.de/wiki/digital_preservation_plan|Digital Preservation Plan]]

  * [[https://datacenter.zfmk.de/wiki/abcd_overview|ABCD Overview]]
  * [[https://datacenter.zfmk.de/wiki/list_preferred_formats|List of preferred formats]]


GFBio internal link: https://gfbio.biowikifarm.net/internal/Task_2.3_Certification_of_GFBio_Data_Centers

Beispielimplementierung: https://edal.ipk-gatersleben.de/  Welches Zertifikat haben die denn? Ich kann keines auf der Webseite finden.

DSMZ : Zertifiziert nach ISO 9001:2015 von DQS

===== Tasks related to this from phase II =====


[[https://gfbio.biowikifarm.net/internal/WP5_Task_5.3_Backup/_Archival_Storage_and_Long-term_Archiving_at_Collection_Data_Centers|WP5 Task 5.3 Backup/ Archival Storage and Long-term Archiving at Collection Data Centers]]

[[https://gfbio.biowikifarm.net/wiki/Technical_Documentations|Technical documentations of the GFBio data centers]]

[[https://gfbio.biowikifarm.net/wiki/Concepts_and_Standards|Concepts and Standards]] including: [[https://gfbio.biowikifarm.net/wiki/ISO_Standards_for_Digital_Archives|ISO Standards for Digital Archives]]

[[https://gfbio.biowikifarm.net/internal/Archiving_processes_in_the_GFBio_Collection_Data_Centers_(WP5)|Archiving processes in the GFBio Collection Data Centers (WP5)]]
===== Certification organisations =====

[[https://www.iso.org/standard/56510.html|ISO 16363:2012]]
  * defines a recommended practice for assessing the trustworthiness of digital repositories. It is applicable to the entire range of digital repositories.
  * a little more about the process: [[https://www.iso.org/certification.html|ISO - The facts of certification]]
  * costs: 178CHF ~ 160€ (bzw. 206€ bei [[https://www.beuth.de/de/norm/iso-16363/151263066|DIN Web store]])
    * work through {{ :gfbio:self-assessmenttemplateforiso16363.xls |Self-Assessment Template for ISO 16363 (.xls)}} 
    * ISO standard provided by CCSDS: {{ :gfbio:652x0m1.pdf |CCSDS 652.0-M-1 is equivalent to ISO 16363}} 
    * buy ISO standard
    * search certification body for Germany ??? TÜV or DQS [[https://www.dqs-holding.com/]], all for ISO 9001 but not ISO 16363
  * //but necessary for executing the task?//


[[https://www.dnb.de/Subsites/nestor/EN/Siegel/siegel.html|nestor-Seal]]:

  * Origin: a set of guidelines for setting up a trusted digital repository as an instrument for self-evaluation

  * Now: Reviewer based certification
  * costs: 500€
  * fits into [[http://www.trusteddigitalrepository.eu/Welcome.html|TrustedDigitalRepository.eu]]
  * Based on [[https://www.din.de/de/mitwirken/normenausschuesse/nid/normen/wdc-beuth:din21:147058907|DIN 31644]] - extra costs 


[[https://dini.de/dienste-projekte/dini-zertifikat/|DINI Certificate]]:

  * Catalogue of criteria as  basis for DINI certificate
  * DINI-ready for hosting provider
  * Certification by DINI-office or authorized working group, using a questionaire and subsequent verification by two evaluators
  * costs: 100€
  * unlimited valitity of certification

[[https://www.icsu-wds.org/services/certification|ICSU-WDS]]:

  * Certification of member organizations
  * Usage of "internationally recognized standards"
  * Certification against [[https://doi.org/10.5281/zenodo.168411|CoreTrustSeal Data Repositories Requirements]] for accreditation of regular membership (now replaced by CoreTrustSeal, see below)
  * Certification against [[https://www.icsu-wds.org/services/certification/network-member-catalogue-of-criteria|Network Member Catalogue of Criteria]]

[[https://www.coretrustseal.org/about/|CoreTrustSeal]]:

  * Setup by ICSU-WDS and DSA
  * Replaces DSA certification and WDS Regular Members certification
  * Certification based on: [[http://www.coretrustseal.org/requirements/|DSA-WDS Core Trustworthy Data Repositories Requirements]]
  * Certification using an [[https://www.coretrustseal.org/apply/|online tool]] and subsequent review
  * costs: 1,000€
  * certification valid for 3 years
  * you have to providing sufficient evidence (documents? more?) for 17 Requirements (all are mandatory and equally weighted)
    * R0 - Background and Context (Repository Type, Designated Community, Level of Curation, Outsource Partners, Other Relevant Information)
    * R1 - Mission/Scope 
    * R2 - Licenses (all applicable licenses covering data access and use and monitors compliance)
    * R3 - Continuity of access (continuity plan to ensure ongoing access to and preservation of its holdings)
    * R4 - Confidentiality/Ethics (data are created, curated, accessed, and used in compliance with disciplinary and ethical norms; DSGVO)
    * R5 - Organizational infrastructure (adequate funding and sufficient numbers of qualified staff managed through a clear system of governance to effectively carry out the mission, funding structural or project-based, FTE-numbers)
    * R6 - Expert guidance (mechanism(s) to secure ongoing expert guidance and feedback (in-house or external, including scientific guidance)
    * R7 - Data integrity and authenticity (guarantees the integrity and authenticity of the data during the processes of ingest, archival storage, and data access; changes to data and metadata are documented and can be traced to the rationale and originator of the change; degree of reliability of the original deposited data and its provenance, relationship between the original data and that disseminated; relationships between datasets and/or metadata) 
    * R8 - Appraisal (accepts data and metadata based on defined criteria)
    * R9 - Documented storage procedures (documented processes and procedures in managing archival storage of the data; ‘archival storage’ in OAIS terms)
    * R10 - Preservation plan (responsibility for long-term preservation and manages this function in a planned and documented way)
    * R11 - Data quality (appropriate expertise to address technical data and metadata quality and ensures that sufficient information is  vailable for end users to make quality-related evaluations)
    * R12 - Workflows (Archiving takes place according to defined workflows from ingest to dissemination; consistent, rigorous, documented approach to managing its activities throughout their processes and that changes to those processes are appropriately implemented, evaluated,recorded and administered; all workflows are documented)
    * R13 - Data discovery and identification (enables users to discover the data and refer to them in a persistent way through proper citation)
    * R14 - Data reuse (reuse of the data over time, ensuring that appropriate metadata are available to support the understanding and use of the data; data can be understood and used effectively into the future despite changes in technology)
    * R15 - Technical infrastructure (well-supported operating systems and other core infrastructural software and is using hardware and software technologies appropriate to the services it provides to its Designated Community)
    * R16 - Security (protection of the facility and its data, products, services, and users; damage scenarios based on malicious actions, human error, or technical failure that pose a threat to the repository and its data, products, services and users)