mmunity, and on what conditions; 
– requirements for authentication and authorization of accessors; 
– enforcement of agreements applicable to access conditions; 
– recording of access actions. 
Access may be managed partly by computers and partly by humans; checking passports, for 
instance, before issuing a user ID and password may be an appropriate part of access 
management for some institutions. 
AUDIT AND CERTIFICATION OF TRUSTWORTHY DIGITAL REPOSITORIES 
CCSDS 652.0-M-1 
Page 4-26 
September 2011 
4.