What is ISO/TR 22428-1 about?
ISO/TR 22428-1 is the first part of the ISO/TR 22428 series of standards that presents a model for cloud records management and outlines the risks and issues that are considered by records managers before adopting cloud services for records management.
The model for cloud records management includes a stakeholder model, processes, metadata, architecture, and use cases. Risks and issues are classified into those originating from cloud services internally and those originating from cloud services externally. Internal risks are associated with cloud services, systems, and stakeholders. External risks and issues can occur in the social and legal context in which cloud services operate.
Who is ISO/TR 22428-1 for?
ISO/TR 22428-1 on cloud computing environments is useful for:
- Governance professionals
- Cloud service architects
- Archivists using cloud services for managing records
- Developers of cloud-deployed records management software
- ICT staff
- Providers of cloud-based records management services
Why should you use ISO/TR 22428-1?
A cloud service refers to capabilities offered via cloud computing where users can borrow, to use flexibly, physical or virtual resources which include software and platform, as well as computing infrastructure, such as data storage and computing servers.
Currently, the explosive growth of digital content through mobile platforms and the Internet of things is driving organizations to move their computing systems and information assets to the cloud. In the near future, it is expected that most data will be processed and stored in cloud services. However, organizations can be reluctant to adopt cloud services for their records management due to unknown risks, safety and privacy concerns, and an absence of convincing use cases.
Users from various countries or regional communities can share a cloud service belonging to a particular country. These characteristics of the cloud can cause various conflicts and issues because the jurisdictional structure and social environment of the country where the cloud service provider belongs are different from those of the cloud users. As a result, cloud users can be faced with unexpected risks associated with immature legal and social agreements for cloud technology. ISO/TR 22428-1 helps the records managers introduce cloud services to records management, they should consider the legal and social aspects as well as the technical aspects in advance in order to prepare for potential risks. ISO/TR 22428-1 helps the records managers to provide cloud service providers with prerequisites for managing risks, specified in contracts to reduce the probability of risks coming to fruition. ISO/TR 22428-1 aims to provide guidelines for persons and organizations who intend to adopt cloud services for records management.