security patches are frequently responsible for upsetting alternative aspects of system 
functionality or performance. It may not be necessary for a repository to implement all 
software patches, and the application of any must be carefully considered. Each security 
update implemented by the repository must be documented with details about how it is 
AUDIT AND CERTIFICATION OF TRUSTWORTHY DIGITAL REPOSITORIES 
CCSDS 652.0-M-1 
Page 5-9 
September 2011 
completed; both automated and manual updates are accep