ting This Requirement 
Repository employs the codes of practice found in the ISO 27000 series of standards; 
organizational chart; system authorization documentation. Repository maintains ISO 17799 
certification. 
Discussion 
Authorizations are about who can do what: who can add users, who has access to change 
metadata, who can access audit logs. It is important that authorizations are justified, that staff 
understand what they are authorized to do, that staff have required skills associated with 
variou