Text 
This is necessary in order to protect the integrity of the archival objects from unauthorized 
changes or deletions. 
Examples of Ways the Repository Can Demonstrate It Is Meeting This Requirement 
Risk register (list of all patches available and risk documentation analysis); evidence of 
update processes (e.g., server update manager daemon); documentation related to the update 
installations. 
Discussion 
Decisions to apply security updates are likely to be the outcome of a risk-benefit assessment; 
