t rely on the repository’s identification and authorization systems.  Protection 
against loss of confidential information in the possession of the auditor must be provided by 
the security system of that auditor and the method of transmission of information which is 
agreed between the repository and auditor.  Protection against damage to the repository or its 
holdings during an audit must rely on the security and safety systems of the repository. 
 
AUDIT AND CERTIFICATION OF TRUSTWORTHY DIGITAL REPOSITO