Publication of ISO/TS 18759: 2022 Standard Document Management – Trustworthy Storage System Functional and Technical Requirements

ISO (International Organization for Standardization) had published the ISO/TS 18759:2022 standard (CHF138)concerning document management – Trustworthy Storage System (TSS), functional and technical requirements.

This document specifies the functional, technology-neutral requirements for TSS that ensure storing and managing electronically stored information (ESI) in a protected and secure fashion during the lifecycle of the information. The TSS as specified in this document is storage technology neutral and accordingly does not specify any specific storage media types or configurations.

This document is applicable to all information systems in which users and applications must manage the protection, preservation and security of stored ESI throughout its entire lifecycle to meet organizational and regulatory requirements to enforce:

• Imutability, authenticity and trustworthiness of the stored ESI;

• Protection of application managed ESI and other stored ESI against tampering, malicious acts and ransomware;

• Organizational ESI preservation and retention policies;

• Protection for unstructured and unmanaged data.

Introduction
The TSS provides a secure storage framework to preserve and protect all types of electronically stored information (ESI) independent of the application and is not intended to be limited to the use cases of content and records management applications. It provides a unified tamper-resistant storage repository for the preservation and protection of ESI for various environments. In a digital world where information is created, authored and captured electronically, the TSS provides the vital security, protection and preservation of ESI vs. a growing list of evolving vulnerabilities including accidental and malicious acts, malware and ransomware as well as operational and application errors.

Organizations designing and implementing information and content management systems need guidance on how to select and implement a trustworthy storage system to safeguard the trustworthiness, reliability, authenticity, integrity and immutability of ESI throughout its entire lifecycle. A trusted system needs a TSS in order to maintain ESI trustworthiness ensuring chain of custody, compliance with organizational mandates, legal and regulatory requirements and admissibility standards, including enforcement of retention requirements and deletion-holds. The TSS also benefits organizations that do not have a formal records programme or application, but are responsible for protecting, managing and securing information for their organization.

Readers are advised to use this document taking into account their local jurisdictions and applicable liabilities, paying special attention to legal, regulatory and other organizational requirements, obligations and expectations.

General information:

• Status: Published
• Publication date: 2022-08
• Edition: 1
• Number of pages : 32
• Technical committee: ISO/TC 171/SC 2 Document file formats, EDMS systems and authenticity of information
• ICS : 37.080, document imaging applications, 35.240.30 IT applications in information, documentation and publishing