The use of the Audit and Certification Recommended Practice has several potential areas of 
security concern. 
One security concern is the possibility that the repository is fooled into undergoing an audit 
by someone unqualified or even malicious.  
Another concern involves the possible release of confidential information which is collected 
as evidence by the auditor. 
A2 SECURITY CONCERNS WITH RESPECT TO THE CCSDS DOCUMENT 
The repository may ask someone to perform an audit using this Recommended Practic