 standards; system 
control list; risk, threat, or control analyses; and addition of controls based on ongoing risk 
detection and assessment. Repository maintains ISO 17799 certification. 
Discussion 
The repository should show how it has dealt with its security requirements. If some types of 
material are more likely to be attacked, the repository will need to provide more protection, 
for instance. Repositories that have experienced incidents could record such instances, 
including the times when systems